HERE'S WHY
In order for employees to see a specific policy during onboarding, it must first be approved.
BEFORE DIVING IN
Only the person assigned as the 'Owner' is able to approve a policy.
HERE'S HOW
Note: Once a policy is approved, you can no longer delete the policy. You can archive the policy.
To approve a policy, scroll right to the green button that says 'Approve' and click it to approve the policy.
The owner of the policy will then be prompted to 'Approve policy version?' and will be given the option to send an email notification to all employees to notify them of the changes and to log back into Drata to acknowledge the new version. At this point, you will also have the opportunity to review and update your policy renewal date to align with your company's compliance goals.
WHAT DOES IT MEAN TO RENEW A POLICY
Renewing your policies can mean varying things depending on the needs of your compliance program. Here are some options for you to consider when managing a policy that is up for renewal. Some frameworks require that the policies are simply reviewed on a certain cadence. In this case, when the policy renewal date comes around, perform the following steps:
Read the policy to make sure it's accurate and up to date.
Adjust the renewal date for the next time a review is required
Select "Update" to save your changes and elect that this is NOT a material change when prompted
Some frameworks require that your policies are reviewed AND acknowledged by your personnel on a certain cadence. If this in the case, perform the following steps when the renewal date comes around:
Read the policy to make sure it's accurate and up to date
Adjust the renewal date for the next time you need to have your employees acknowledge the policy
Select "Update" to save your changes and elect that this IS a material change
Have the policy owner approve the policy
Notify your personnel they need to acknowledge the policy (or policies) through Drata or your own means