Write policies for the organization
Develop policies for access, acceptable use, information handling, suppliers and incident response. Use language staff can understand and responsibilities management can approve.
ZenCOMPLY · Policy & compliance
Policies need to stay useful after they are written.
Zen Cyber can provide a system for creating and maintaining policies, organizing evidence and reviewing Canadian compliance requirements. ZenCOMPLY gives that work a place to live, with guidance from the people helping you carry it out.
Talk about ZenCOMPLY
Policy and compliance management
A system, supported by people who understand the work.
Create policies, keep them current and organize the evidence needed for reviews of applicable Canadian requirements.
We help identify the requirements that apply to your organization and develop policies around them. That includes responsibilities, approvals and a process for review when your systems, services or obligations change.
ZenCOMPLY supports a structured approach to maintaining that material and preparing for internal reviews and audits. We agree with you on the policies, evidence and review process the system needs to support. The service helps manage compliance work; formal legal advice and independent certification remain separate engagements.
How we can help
Create, maintain and review.
The starting point may be a first set of policies, an audit request or documents that have fallen out of date.
Keep the documents current
Establish policy ownership and a review process. Update the material when staff roles, technology, services or requirements change, and record the decisions made.
Prepare for questions and audits
Identify the evidence needed to show how a policy is put into practice. Organize records, review findings and outstanding actions for the people conducting the review.
Work from the requirements that apply
Consider the organization’s province, sector, information and contractual obligations. Review relevant Canadian privacy and security requirements with qualified advisers where needed.
Getting started
Start with the material you have.
We can review existing policies and audit requests before recommending the system and support you need.
Establish the scope
Discuss your organization, applicable requirements, existing documents and who is responsible for the work.
Build a workable policy set
Identify gaps, draft or revise the policies and agree on review responsibilities. Define what evidence needs to be maintained.
Put a review process in place
Use ZenCOMPLY to support ongoing policy maintenance and audit preparation. Agree on the assistance Zen Cyber will provide as the work develops.
Let's talk
Is your policy work keeping up with the organization?
Tell us about the documents, requirements or upcoming review you need to get under control.