Common questions

What should a policy include?

Document control (owner, approver, version and review date), its purpose and scope, definitions, roles and responsibilities, the policy statement, related procedures, what happens if it's breached, and the review cycle. This template has a section for each.

What is the difference between a policy and a procedure?

A policy says what the business requires and why, such as “client data must be kept confidential”. A procedure says how to do it, step by step. Policies change rarely; procedures change whenever the way of working does.

How often should policies be reviewed?

Usually every one to two years, and straight away after a change in the law, a serious incident or an audit finding. Some regulators and standards set their own review periods.

Will writing policies from this template make my business compliant?

No. The template gives the policy a structure, but what it must say depends on the laws and standards that apply to you. Check the content against them, or ask an adviser.

Where do I keep policies in Wikidoc?

Write the policy as a Wikidoc document from this template, then add it to the Policies tab in Registers with its owner, category, effective date and review date. The Policies tab is on the Team plan.

Run your checklists and SOPs in one place