Policy Review
What is Policy Review?
The periodic evaluation of existing policies to ensure they remain current, relevant, effective, and aligned with regulatory requirements.
Terms that appear alongside policy review
Each of these is named in at least one of the same controls as policy review. The number is how many controls name both.
- policy 12 shared controls
- information security 7 shared controls
- nist 2 shared controls
Frameworks that govern policy review
What the standards actually require on policy review
Requirements naming policy review across 6 standards, quoted from the control text.
Review every relevant organisational policy and its supporting procedures at least annually and whenever the organisation changes substantially.
CCM-GRC-03 · Organizational Policy Reviews →For services through an Australian permanent establishment the AML/CTF policies must deal with identifying significant changes to the s 26C(3) risk matters, carrying out customer due diligence under Part 2, reviewing and updating the policies after a risk asse...
amlctf-act-2006-australia::26F(3) · Risk-mitigation policies: significant changes, customer due diligence and policy review →The institution must monitor the date each policy or procedure was last revised, the date it next falls due for review, and who is responsible for that review.
CPS220-P36 · Monitoring of Policy Review Dates and Ownership →Every relevant organisational policy and its procedures is reviewed at least yearly or when the organisation goes through a substantial change.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::GRC-03 · Organizational Policy Reviews →Once a year the employer should review every policy and procedure and how they are applied, taking workers' input, to check that they satisfy both the law and the FLA Workplace Code.
fair-labor-association-fla-workplace-code-of-conduct::ER.1.3 · ER.1.3 Annual policy review with worker input →The processor describes its physical, technical and administrative safeguards implementing the policy (such as authentication and access control, encryption, boundary protection, audit logging and monitoring) and periodically reviews them for relevance and eff...
global-cross-border-privacy-rules-global-cbpr-forum::PRP.2 · Global PRP requirement 2: safeguards that implement the security policy, reviewed periodically →Questions people ask about policy review
What is Policy Review?
Why is Policy Review important for compliance?
Which compliance frameworks address Policy Review?
Where can I learn more about Policy Review?
See how Policy Review applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.