POLICY & PROCEDURES

Crucial to maintaining efficiency.

The foundation of a mature and robust Security Program is a set of Policies that align an organization to industry best practices, regulatory influence and organizational objectives. If an organization can demonstrate they not only have policies, but are adhering to them, it puts them in a defensible position with the auditor.

Because most organizations have more than one industry standard that requires compliance, automating policy management is crucial to maintaining efficiency. The Allgress Policy Management functionality allows for centralized management of internal security and regulatory policies and procedures and their associated SLA’s. It provides full lifecycle management including policy definition and drafting, publishing, exception management, policy attestation, and tracking.

Allgress simplifies control mapping by allowing users to reference how similar policies are mapped to specific controls. The Policy Management functionality includes full versioning and archiving capabilities, allowing users to view past, present and draft versions of policies. With the Policy Management functionality, Allgress enables you to support the unique security and compliance goals of your organization.

• Unify and disseminate your organization’s document library from a centralized platform.

• Quickly assess your gaps in policy with controls mapping.

• Request policy acceptance from users or allow and track exception requests for policies, if applicable.

• Link corporate policies or procedures to control audits, surveys, exceptions, risks, and other assessments to inform your risk posture.

• Reduce the time required to get started by leveraging templates, based on any industry regulation or security framework.

• Retain formatting and brand integrity by simply importing an existing policy or procedure via our Microsoft Word Doc importer.

• Publish completed policies to your employee base and track employee policy acceptance.

• Manage multiple policies across all business units from a centralized management console.

• View past, present, and draft versions of policies in the same location and easily spot differences through versioning and archiving capability.

• Publish graphs and reports showing how your policies and procedures align to the standards and regulations, with clear gap analysis.