Developing Policies ◾ 11
Is the policy only enforced when employees are in the work-site campus or will it
extend to off-site activities? It is necessary to identify as many of the conditions and
terms as possible.
Responsibilities
e assignment of roles and responsibilities is also included in tier 2 policies. For
example, the policy on company-approved software will have to identify the pro-
cess to get software approved. is would include the authority (by job title) autho-
rized to grant approval and a reference to where this process is documented.
is is a good time to discuss deviations from policy requirements. I have
established a personal standard in that I never discuss how an entity can gain a
dispensation from the policy. I don’t l ...