Overview of the Policy Management Module

You can easily manage all of your documentation, including policies, standards, procedures, contracts and other documentation on the 1Risk Platform. C1Risk also provides templates for your guidance and use as you build out your governance documentation. Contact support@c1risk.com or your account manager for more information. Sample templates include:

1. ISO 27001 ISMS documentation

2. Information Security Policy Templates

3. System Security Plans

4. QSM (ISO 9001) Policy Templates

5. Standard and Procedural Templates for Information Security

6. Privacy Policies

        The 1Risk platform Policy Management module gives you the freedom to write, review and edit and manage your policies on the platform, create your documents outside the platform (Word, Google, PDF, PowerPoint etc.) and attach them to Policy Records in the 1Risk Platform, or integrate with Google or Word Docs. Choose any of, or any combination of the above.

Policies can then be sent for review and review scheduled on an annual basis, or as required, and distributed to specific individuals, teams or all employees for training and attestation. All your activity, edits, attestations will be tracked on the platform and old documents will be auto-archived as new documents are published.

As such, there are four steps in the Policy Management module, as follows:

1. Write and Edit

2. Review, Approve, Publish

3. Schedule or Override Reviews

4. Send for Attestation

Before we go through these steps, let’s take a look at the different ways to create a Policy/Document in the 1Risk Platform.

See LInks:

1. Write your Policy on the 1Risk Platform

1. Add a Link or Attachment to an Existing Policy/Document
2. API Integration with Google Suite/MS Word
3. Authors/Contributors for writing and editing documents.

        2. Review,Approve, Publish

1. Reviewers: How to Approve a Policy/Document

   3. Scheduling Policy Review (Annual/Other) or Overriding Scheduled Reviews

   4. Policy Mapping: Mapping Internal Controls and Frameworks for Compliance