Documents governing how work is done.
WHAT A POLICY IS
A statement of what must or must not happen.
WHAT A PROCEDURE IS
How it is done.
WHY THE DISTINCTION MATTERS
Policies change rarely; procedures change often.
WHAT TO KEEP SEPARATE
The two documents.
WHAT A POLICY SHOULD CONTAIN
What it covers Who it applies to What is required What is prohibited Consequences of breach Who owns it When it was last reviewed
WHAT TO AVOID
Policies describing practices nobody follows Language so general it decides nothing
WHY THAT FIRST POINT MATTERS
Unfollowed policies become evidence against you.
WHAT TO DO INSTEAD
Document what you actually do, then improve it.
HOW LONG SHOULD A POLICY BE
As short as possible.
WHY
Long policies are not read, and unread policies do nothing.
WHAT TO TEST
Whether someone could apply it to a real situation.
HOW
Give them a scenario and ask.
WHAT TO INCLUDE FOR ANYTHING AMBIGUOUS
Examples.
WHAT TO DO ABOUT EXCEPTIONS
State who may authorise them.
WHY
Otherwise they are made informally by anyone.
WHAT TO SCHEDULE
Review, with an owner and a date.
WHAT TO COMMUNICATE ON CHANGE
What changed, and what people must do differently.
