Policy Writing in Practice

Policy documents are foundational governance artifacts, and most organizations have policies nobody reads, follows, or updates. The gap between having policies and having policies that work is where GRC practitioners earn their keep.