Process Transformation

Document Type - Policy Profile

The policy is the underlying principle upon which processes and programs are built. One might consider that a policy is "Commander's Intent", and it is up to the persons governed to determine the best practice or process to attain their goal within the confines of the policy. While not every program requires a policy, information technology practice is largely determined by the Security Policy, Change Policy, and Data Classification Policy. In addition, most business practice is in some way governed by the Human Resource Policy. The policy is implemented by programs that enact processes. The policy is generally required for legal and regulatory compliance. The policy is enforced through the system, application, and organizational controls. A policy is typically designed to be true across all departments and for all persons. Where a policy is highly specific to a program or department, it is generally a department policy, but not a formally distributed corporate policy.

Elements:

• Policy Area
• Effective Date
• Revision Date
• Contacts:
• Summary
• Goals
• Applicability
• Policy Statement
• Roles and Responsibilities
• Compliance
• Exemptions
• Appeals
• Authority
• Related Documents
• Definitions

Should I Write a Policy Profile?

Consider whether the following statements are true.

Figure 4. Should I write a policy profile?

\\...\PAL\TEMPLATES\Policy Profile.dot (We expect to release secure templates sometime after May 2022.)

Document Type - Program Profile

Program Profiles are sometimes referred to as a program or department charter and are used to define the scope of a group as well as the requirements of its organization. This document outlines the overall organizational or department function and is aligned with departments and individual performance reviews. Program profiles may include job descriptions or job profiles and are represented by organizational diagrams. These are supporting documents, often associated to the program profile.

Attributes of a program include:

• Manages Control Systems and Events
• Owns Initiatives and Business and IT Systems
• Responsible For Supporting Functions
• Is Measured
• Program profiles support the ability to perform:
• Personnel Recruitment and Promotion
• Benchmark Personnel Qualifications
• Designate Roles and Responsibilities
• Plan and Deliver Personnel Training
• Implement Cross-Training or Staff Back-up
• Verify Personnel Clearance Procedures
• Design and Perform Employee Job Performance Evaluation
• Determine Job Change and Termination Requirements

Program Profile Elements:

• Purpose and Scope:
• Roles and Responsibilities:
• Program Elements:
• Tools:
• Program Controls and Measures