Policy
Controls mapped to the clause, not the document
A policy is mapped at section and bullet level, so “which policy covers this control?” has a precise answer rather than a PDF and a page number.
- Section and bullet level control mapping
- Versioning with approvals recorded per version
- Section edit locks so contributors do not overwrite each other
- Acknowledgments tracked per reader
- Draft
- Contributor review
- Approval
- Published
- Acknowledged
Versioned, with section edit locks so contributors do not overwrite each other
Controls mapped per clause
- 3.1 Access is granted on least privilege2 controls
- 3.2 Privileged accounts are reviewed quarterly3 controls
- 3.3 Shared accounts are prohibited1 control
Authoring
Multiple contributors without collisions
Policies are structured into sections and bullets rather than stored as an opaque document, which is what makes clause-level mapping and concurrent editing possible.
- Contributors assigned per policy
- Section edit locks during concurrent authoring
- Documents and external references attached
- A policy audit log covering every change
| Action | asset-viewer | asset-coordinator | asset-approver | asset-admin |
|---|---|---|---|---|
| View | Allowed | Allowed | Allowed | Allowed |
| Create and edit | Not allowed | Allowed | Not allowed | Allowed |
| Submit for intake | Not allowed | Allowed | Not allowed | Allowed |
| Send to review | Not allowed | Allowed | Not allowed | Allowed |
| Send back | Not allowed | Allowed | Allowed | Allowed |
| Approve | Not allowed | Not allowed | Allowed | Allowed |
| Activate | Not allowed | Not allowed | Allowed | Allowed |
| Module settings | Not allowed | Not allowed | Not allowed | Allowed |
Every module ships bundles at this granularity. Segregation-of-duties conflicts are declared as rules, with logged exceptions.
Exceptions
Exceptions are a workflow, not a flag
Exception handling carries configurable workflow templates, field visibility and requirement rules, delegation, renewals, reviews, and compensating controls.
- Configurable workflow templates with ordered steps
- Compensating controls recorded against the exception
- Reviews, renewals, and renewal status tracked
- Risk rating, priority, stakeholders, and full history
Treatment decision
- 1Treatment planActions with owners, priority, and due dates
- 2Action trackingStatus per action, SLA where defined
- 3ReassessmentResidual score recalculated after closure
Framework alignment
Works with your control frameworks
This module shares the platform control library. Map national frameworks and global standards alongside jurisdiction-specific authorities.
Solutions by role
Built for your team
See policy management in your environment
A walkthrough scoped to your entities, your frameworks, and the way your programme is actually run.