Use Policies to write and maintain your governing documents: policies, guidelines, standards, procedures and routines. Policies are written in Diri's built-in editor, follow a simple approval status, and can serve as evidence for framework controls once they are published.
Open Governance & Compliance → Policies in the left-hand menu. The list shows the policies you have access to in the active organisation.
The older Frameworks and Control reference fields are no longer used. Use Control tags instead.
Select Open in editor (or Edit policy). The editor lays the document out as A4 pages and supports:
Select Save policy when you are done. Use Preview to see the finished layout, and Print policy to print or save it as PDF. You can also preview a policy from the list without opening the editor.
Move the policy through Not started, Draft and In review to Published as it is written and approved. Record who approved it and when in Approved By and Approval Date.
Only a published policy counts as evidence for a control. While a policy is a draft or in review, any control relying on it stays short of satisfied. Remember to set the status to Published when the policy is ready.
Set a Revision Date to plan the next revision. The responsible person is reminded 7 days before the date, and the revision appears on the Annual Wheel.
| Visibility | Who can see the policy |
|---|---|
| Me only | Only you. It does not appear to any other users in the organisation. |
| Only active organization | All users in the currently active organisation. |
| Downwards in the organization | All users in your organisation and any sub-organisations below it. |
Changing a policy to Me only immediately removes access for everyone else who can see it. If you are not the owner of the policy, choosing Me only would hide it from you.
A parent organisation can view the policies of its sub-organisations. A policy that belongs to another organisation is view-only; switch to that organisation to edit it.
Add the controls in the policy's Control tags field, or link the policy from the control with Connect resource. See Controls and evidence. Linked policies are listed in the Policy Inventory of the Audit Evidence Report.
Select Save as template to reuse a policy as a starting point for new ones. Activating a framework can also give you starter policies to adapt. See Frameworks.
Select Import policies to create or update many policy records at once from Excel or CSV. The policy content itself is not imported: open each policy in the editor to paste and format the text. See Bulk import.
Policies that are no longer in active use can be archived. They are kept for reference and regulatory needs, and can be restored or permanently deleted. See Archive.