Reply To: Evaluate the strengths and weaknesses of the Policy management processes best practice interactions to other KPA’s. What could be removed? What should be added? What could be modified? Why?

[Andrea Murschel]

Some strengths of policy management:
– Having the support of security, corporate risk and security groups for interpretation of legislation and related best practices
– Having the support of HR for policy management, learning and resource considerations

Some weaknesses that are challenges to policy management:
– Separating policy rules and procedures clearly, especially in terms of what can be consistently enforced
– Asset types where ITAM workflow starts with identification rather than acquisition, causing issues with full-lifecycle policy rule enforcement
– Ensuring no duplication or conflict among policies and their procedures
– Effective communications to all stakeholders