The policy renewal date enables you to manage policy review and acknowledge timelines on your schedule. The policy renewal date is also used for compliance checks for policy-related tests.
Managing your policy renewal date
Each policy has a renewal date you can set. The renewal date is a required field for each policy.
NOTE: When selecting the renewal date, remember that many frameworks require that policies are reviewed and acknowledged by your personnel annually. In order to maintain your compliance posture and pass an audit with flying colors, ensure this renewal date gives you enough time to have your personnel acknowledged these policies again before a year is up.
Policy Renewal and Tasks
Automated policy-related tasks appear on the task timeline according to the renewal date set for each policy.
Policy Renewal and Tests
Policy-related tests are based on the renewal date as well. They check to see that the renewal date is before today (i.e. the date the test runs) in order for the test to pass.
WHAT DOES IT MEAN TO RENEW A POLICY
Renewing your policies can mean varying things depending on the needs of your compliance program. Here are some options for you to consider when managing a policy that is up for renewal. Some frameworks require that the policies are simply reviewed on a certain cadence. In this case, when the policy renewal date comes around, perform the following steps:
Read the policy to make sure it's accurate and up to date.
Adjust the renewal date for the next time a review is required
Select "Update" to save your changes and elect that this is NOT a material change when prompted
Some frameworks require that your policies are reviewed AND acknowledged by your personnel on a certain cadence. If this in the case, perform the following steps when the renewal date comes around:
Read the policy to make sure it's accurate and up to date
Adjust the renewal date for the next time you need to have your employees acknowledge the policy
Select "Update" to save your changes and elect that this IS a material change
Have the policy owner approve the policy
Notify your personnel they need to acknowledge the policy (or policies) through Drata or your own means