Skip to content

Policy Development

What is Policy Development?

The process of creating new organizational policies including research, drafting, stakeholder consultation, approval, and implementation.

Governance

Frameworks that govern policy development

COBIT 2019View framework →ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on policy development

Requirements naming policy development across 4 standards, quoted from the control text.

ISO/IEC 30111:20191 control

Every vendor shall write, and keep up to date, an internal policy for handling vulnerabilities. The policy sets out and makes clear what the vendor intends to do when investigating and fixing vulnerabilities within the handling process, and it must fit with th...

iso-iec-30111-2019::6.3 · 6.3 Vulnerability handling policy development →
Victoria Child Safe Standards (2022)1 control

Good-practice models and consultation with stakeholders shape the organisation's policies and procedures.

victoria-child-safe-standards-2022::s11-11.3 · 11.3 Best practice and stakeholder consultation inform policy development →
Australia National Principles for Child Safe Organisations (2019)1 control

Good-practice models and consultation with stakeholders shape policy development. Indicator: partner or funded organisations show adherence to child safety policies and practices.

australia-national-principles-for-child-safe-organisations-2019::p10-10.3 · 10.3 Best practice and stakeholder consultation inform policies →
Japan FSA Cybersecurity Guidelines for Financial Institutions1 control

Management allocates resources appropriately, placing specialists in the cybersecurity function and budgeting what is needed; sets a talent plan consistent with the basic policy (development, hiring and training plans) with a sustainable HR policy covering rep...

japan-fsa-cybersecurity-guidelines-for-financial-institutions::2.1.3-B · 2.1.3 Resources and human talent: basic actions →

Questions people ask about policy development

What is Policy Development?
The process of creating new organizational policies including research, drafting, stakeholder consultation, approval, and implementation.
Why is Policy Development important for compliance?
Policy Development is a key concept in Governance. Understanding policy development helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Policy Development?
Policy Development appears in the requirement text of ISO/IEC 30111:2019, Victoria Child Safe Standards (2022), Australia National Principles for Child Safe Organisations (2019), Japan FSA Cybersecurity Guidelines for Financial Institutions. Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Policy Development?
Explore our compliance framework pages to see how policy development applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Policy Development applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.