


Policies are a 1-2 page statement of intent, endorsed and approved by senior management. Policy documents include the mission and vision statements. Policies apply across the organisation and are non-negotiable.
Standards articulate requirements that are mandatory across the organisation.
They provide information about the acceptable level of practice required to meet its policies and other obligations.
Standards apply across the organisation and are non-negotiable.
Example Standards:
Standards articulate requirements that are mandatory across the organisation.
They provide information about the acceptable level of practice required to meet its policies and other obligations.
Standards apply across the organisation and are non-negotiable.
Example Standards:
Business Processes, including Procedures and Guidelines, are developed and ‘owned’ by specific Business functions (e.g. finance, IT, HR, Ops) within the organisation. There are 2 types of business processes:
Policy & Governance
Leadership and Culture
Responsibility and Accountability
Risk Management
Management of Change
Training and Competency
Objectives and Planning Standard
Communication and Consultation
Business Partners and Suppliers Standard
Emergency Preparedness and Response Standard
Incident and Action
Management Standard
Audit and Assurance Standard
Management Review
Operational Control
Legal and Other
Requirements Standard
Information Management
Monitoring and Measurement
Exemption Management Standard
Health & Safety
Environment and Sustainability
Human Rights