Policy Framework
What is Policy Framework?
An organized hierarchy of policies, standards, procedures, and guidelines that provide direction and governance for an organization's operations.
Terms that appear alongside policy framework
Each of these is named in at least one of the same controls as policy framework. The number is how many controls name both.
- policy 28 shared controls
- security policy framework 20 shared controls
- information security 19 shared controls
- governance 12 shared controls
- security governance 7 shared controls
- security officer 3 shared controls
- compliance 2 shared controls
- risk appetite 2 shared controls
Frameworks that govern policy framework
What the standards actually require on policy framework
Requirements naming policy framework across 6 standards, quoted from the control text.
The entity keeps a body of information security policies, standards, guidelines and procedures whose coverage and depth match its exposure to vulnerabilities and threats.
apra-cps-234::18 · Para 18 Maintain an information security policy framework →Set up a framework of security policies, controls and procedures for information, approved by management at the start and at intervals afterwards, that provides governance and periodic review and ensures security activities are communicated and coordinated.
awwa-cybersecurity-guidance-for-the-water-sector-american-water-works-association::AU-2 · AU-2 Security policy framework with management approval and review →The implementing provider knows and understands the NDIS and state and territory legislative and policy frameworks for behaviour support.
australia-ndis-practice-standards-and-quality-indicators::m2a-3.1 · Behaviour support in the NDIS (implementer): legislative and policy framework knowledge →Financial institutions state whether their policy framework for portfolio activities includes environmental requirements for clients and investees and/or exclusion policies;
cdp-formerly-carbon-disclosure-project::4.7-4.8 · Questions 4.7 to 4.8.1: Portfolio policy framework, exclusions and covenants (financial services) →Adopt and apply policies and standards that are in line with ICMM's policy framework, the principles, expectations and position statements members commit to.
icmm-mining-principles-2024-update::1.3 · 1.3 Consistency with the ICMM policy framework →Maintain a policy framework that defines requirements for cyber supply chain risk management across acquisition, operations, and disposal of systems, components, and services.
SCRM-GOV-2 · C-SCRM Policy Framework →Questions people ask about policy framework
What is Policy Framework?
Why is Policy Framework important for compliance?
Which compliance frameworks address Policy Framework?
Where can I learn more about Policy Framework?
See how Policy Framework applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.