Policy Writing

Workflow

1. Identify policy owner, audience, scope, authority, and review cadence.
2. Define purpose, scope, rules, responsibilities, exceptions, enforcement, and related documents.
3. Use precise obligations: must, must not, may, should.
4. Separate policy requirements from procedures.
5. Flag legal, HR, finance, privacy, and compliance review needs.

Style

• Use consistent terms and defined roles.
• Avoid ambiguous language such as "as needed" without criteria.
• Keep exceptions explicit and auditable.

Verification