Skip to main content

Get help for ARIS Risk and Compliance

What is Policy Management?

The objective of Policy Management is to identify, approve, publish, and monitor corporate policies. These can be policies to reduce risk or policies without a specific risk context. The entire long-term policy life cycle is visible because all published versions of a policy (policy roll-outs) are based on the same policy template. Each policy roll-out generated from a policy template is valid for a specified time period. Optionally, a policy roll-out approval workflow can be executed. If required, the policy addressees can be prompted to read and confirm the published policy as final step of the policy roll-out. Policy review schedulers can be defined to regularly generate tasks to review the current policy (from ARIS version 9.5).

For detailed information on modeling guidelines, refer to the Modeling Conventions.