-
Policy Metadata: Data fields for policy details during policy creation comprise policy metadata – Name, Domain, Applicability, primary and associated controls, Frequency, Writer, Approver, Owner.
-
Policy Content: Content in policy excluding metadata and placeholders.
-
Review Frequency: The time interval a policy is considered valid and needs to be reviewed (e.g., Biannual, Annual).
-
Effective Date: Only the policy writer can set the effective date while creating the first version. The chosen date must either be in the past or in the future within the review frequency.
-
Review Period/window: The 30-day window before the review due date during which writers can edit and submit the policy for review.
-
Frequency due date : The last date for the policy to be effective. Approval from effective date till this date is allowed to treat this policy for the current frequency.