Policy Governance

The Policy Governance domain (/governance) manages the entire lifecycle of organizational policies, standards, guidelines, and procedures.

---

Policy Lifecycle

1. Draft: Policy under initial creation or revision by the policy author.
2. In Review: Circulating among stakeholders for legal, risk, or security review.
3. Approved: Formally approved through the Approvals Hub.
4. Published: Active and communicated to the organization.
5. Superseded / Archived: Retired upon publication of a newer revision.

---

Review Cadences & Expiry Tracking

Policies require periodic re-validation (e.g., annual reviews):

• OrviQ tracks the Next Review Date and automatically flags policies as Due for Review or Expired.
• Review tasks are dispatched directly to the policy owner's workbench.

---

Policy-to-Obligation Mapping

Policies can be mapped to regulatory standards and internal controls, demonstrating which organizational guidelines enforce specific regulatory requirements.