Policies are rules established by an organization that are designed to guide their employees. In an IT environment, policies are used to guide the decisions that relate to the management of the IT infrastructure. Policies have an arbitrary hierarchy and may map to one or many control statements. Apolicy with no control statements can indicate an unimportant policy or a policy where compliance cannot be monitored. A control statement with no policy can indicate a gap showing noncompliance with one or more regulations.
Every policy has a status that is assigned to it at all times. The status is one of the following:
Draft A policy that is authored in its initial form. The policy has not been reviewed. The policy may or may not be complete in the view of the author. Also, a policy that has been reviewed but which has change requests, or a policy that has been unpublished. Policies can only be changed while in Draft status.
In Review A policy in its first draft that is considered complete by the author. The policy is automatically submitted to the policy reviewers for their comments. Reviewer comments and change requests can be made while the policy is In Review.
Awaiting Approval A policy that may or may not have reviewer comments. If a policy does not have change requests from reviewers, the status changes Awaiting Approval. The status changes automatically when the deadline that was set during the policy creation passes. If a policy does have change requests, its status reverts automatically to Draft when the review deadline passes. After the change requests are addressed, the author can submit it for review again.
Policy Approved Apolicy is Approved when the author has incorporated all the reviewer comments and is completely satisfied. A policy that is marked as Approved is ready for publication.
Published A policy administrator with rights to the policy can publish an approved policy. A published policy is accessible to members of the audience from theControl Compliance Suite Web Portal.
Archived A policy that is archived and no longer in effect. An archived policy is not visible in the Policy view. Inactive policies are stored in the database.
Due to the workflow/life cycle of a policy, the status cannot be manually changed and must wait for the review deadline to pass. As a workaround, the value can be manually changed in the database. To do this, run through the following steps: 1. Open up the CSM_DB database 2. Open the policy.Policy table 3. Find the target policy name in the Title column 4. Change the status of this policy to 4 to publish the policy
The following are other status values: 0=Draft 1=In review 2=Pending approval 3=Approved 4=Published
Imported Document ID: TECH115669
Subscribing will provide email updates when this Article is updated. Login is required.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
Subscribed to the Article.
Unable to subscribe
Thanks for your additional feedback !!!
Enterprise Support Virtual Agent
Rate Me :
Tell us more:
Welcome! My name is Sami, the Enterprise Support Virtual Agent answering technical support questions.