Policy Framework

Most organisations end up with dozens of rules written at different times by different teams. A framework gives them order. It usually has layers: a short policy stating principles and the board's expectations, standards stating the minimum requirements, procedures or guidelines explaining how to do the work, and templates or forms supporting it. Each document has an owner, an approver at a suitable level, a version, a date of next review, and a record of who it applies to. Policy management covers the life cycle: drafting, approving, publishing, training staff, checking compliance, handling exceptions and retiring old material. Many firms keep documents in a single library or use software to track attestations. Typical failings are conflicting documents, rules nobody has read, and policies not matching how work is actually done. Staff cannot follow rules they cannot find or that contradict each other, and nobody can enforce them.

A pharmaceutical distributor finds three different documents setting different limits on gifts to doctors. It builds a framework: one board-approved anti-corruption policy, a single standard on gifts and hospitality, and country-level procedures. Each has a named owner and a yearly review date, and the old documents are withdrawn from the intranet.