Featured Product
This Week in Quality Digest Live
Management Features
Matthias Gouthier
Digital technologies are dazzling, but so are the challenges—especially for customer service
Angie Basiouny
Three Wharton experts don’t hold out hope for change
Claire Zulkey
Many managers don’t convey enough information, but those who undercommunicate pay a steeper price
John Logan
Self-organizers at Amazon and big chains are driving the trend
Libby Sander
Seven tips to boost well-being and productivity

More Features

Management News
Gartner survey reveals how organizations are developing their use of AI
While many executives believe themselves immune, research says otherwise.
Tactics aim to improve job quality and retain a high-performing workforce
Increases Xcelerator capabilities for climate-neutral aviation
Demonstrating a commitment to keeping people safe and organizations running
Sept. 28–29, 2022, at the MassMutual Center in Springfield, MA
EPM service provider excels in helping customers work with EPM products
It’s not exactly a labor shortage

More News

Sal Lucido


Check Your Policy Management System’s Health

A four-component survey and assessment

Published: Monday, April 23, 2018 - 12:02

Policies and procedures tell your employees, partners, vendors, and customers how your system operates. With changing regulations and expectations, a static library is not enough. Policies are dynamic and require a system to manage their creation, documentation, distribution, and management. Here’s some sound advice on how to check your policy management system’s health.

Objectives of policy and procedure management for quality management systems

As in any other business area, a functional policy and procedure management system for quality management will:
• Establish and communicate organizational goals and objectives
• Define the organization’s governance and accountability structures
• Explicitly define expectations and consequences
• Establish and shape a culture of compliance
• Reduce legal and regulatory risk through issue and corrective action management
• Establish regulatory compliance and audit readiness

Start your policy management health check
The health check below is designed to help determine the strengths and weaknesses of your policy and procedure management system at a high level. The checkup assesses your system’s strengths and weaknesses based on scoring four critical components or areas:
1. Policy and procedure development
2. Maintenance
3. Exception handling
4. Deployment

Scoring your policy management system’s health
Using the scale below, assign a number to reflect the health of each element of your policy management system:
1 = Exceeds expectations
2 = Meets expectations
3 = Needs improvement
4 = Unsatisfactory

Health check component 1: Policy and procedure development

• Your company’s policies and procedures are written in a consistent, established format.
• Your company’s policies and procedures include the document owner, objective, and scope.
• All of the company’s policies and procedures can be accessed from a single, searchable repository.
• All policies and procedures are reviewed for approval by affected stakeholders.
Total development score: ____ (4–16)

Health check component 2: Policy and procedure maintenance

• Your company’s policies and procedures are reviewed periodically for relevance and timeliness.
• Policy and procedure reviews include assessing the documented effectiveness as well as the number of related exceptions or nonconformances.
• Previous versions of revised policies or procedures can be retrieved as needed by authorized users for regulatory and compliance audits.
• A policy or procedure review can be triggered by an audit finding or nonconformance that exposes the document to be in need of improvement.
Total maintenance score: ____ (4–16)

Health check component 3: Policy and procedure exception handling

• Your company has a documented, established process for handling policy exceptions.
• Anyone in the company can request a policy exception.
• Policy exception requests require a description of why the exception is required, potential risks, and the requested time period for the exception.
• Policy exceptions are reviewed by the process owner, and the rationale for acceptance is documented.
Total exception handling score: ____ (4–16)

Health check component 4: Policy and procedure deployment process

• The approval process involves all relevant stakeholders and allows feedback and suggestions before approval.
• Notification about approved policies and procedures is provided to employees based on role and function.
• Your system handles the attestation process and certifies that policies are “read and understood” by employees.
• Your system provides tools for developing and managing training for all applicable policies and procedures.
Total deployment score: ____ (4–16)

Policy and procedure assessment guide

How healthy is your policy and procedure management system? Use the guide below for each component to see what emphasis you should place on evaluating and improving your policy management system:
• 4–5: Excellent health! Very little improvement, if any, is needed.
• 6–8: Good health. There is some opportunity for improvement in specific areas.
• 9–12: Failing health. High-priority improvement is required. Take steps to assess and improve the weakest areas first. Consider whether the policy management system you are using now is effective for your organization.
• 13–16: Poor health. Urgent improvement is required. Take immediate steps to assess your current policy management system and whether it is effective for your organization now and in the future.


Implementing or improving a policy management system requires a comprehensive approach. By breaking down and assessing the effectiveness of specific system functions, you can approach policy management in a structured way to address areas that need the most improvement first. By using a standardized approach, a team of accountable leaders, and the right automated solution, your policy and procedure management system should be the backbone of safety and compliance management activities. In a changing business environment, your system must adjust and adapt to the needs of your organization.


About The Author

Sal Lucido’s picture

Sal Lucido

Sal Lucido is vice president of enterprise solutions at AssurX Inc. headquartered in Morgan Hill, California. Twitter him at  http://twitter.com/ComplianceTips