PR1.2 IMPLEMENT AND MANAGE CONTROLS, POLICIES & PROCEDURES
Implement, communicate and manage controls, policies and procedures to ensure that they operate and continue to be relevant.
Management should implement, manage, and monitor policies/procedures to ensure that they are in place and followed. Typically, the implementation of a policy/procedure should be accompanied by a communication regarding its implementation and an overview of its contents. Given the target audience or audiences, an appropriate communication channel must be selected. All policies/procedures should be periodically reviewed and updated to ensure that they reflect any changes in laws, rules, or regulations. If changes are significant, management should consider triggering a comprehensive planning process to more appropriately respond to the change.