# Policy Open Decisions
URL: https://docs.autociso.io/console/iso/policy-decisions/
Description: When AutoCISO's AI generates a policy document, it may identify specific questions that need a human decision before the policy can be finalized.

*This is the help text the console shows in the help panel on this page.*

When AutoCISO's AI generates a [policy document](https://docs.autociso.io/console/iso/policies/), it may identify specific questions that need a human decision before the policy can be finalized. These are policy-specific gaps where the AI cannot make assumptions, for example who the CISO is, what your password minimum length is, or how long audit logs are retained.

### How Decisions Work
1. The page shows one question at a time, with a progress bar and a "Question X of Y" counter.
2. Pick one of the listed options. The option the AI suggests is tagged **AI recommends**.
3. Click **Next** to save your answer and move on (the last question shows **Finish**). Use **Previous** to go back to an earlier question you have not yet answered.
4. Once every decision is answered, the policy status changes from **Needs Input** to **Ready**, and the page shows "All decisions resolved!" with a **[Go to editor](https://docs.autociso.io/console/iso/policy-editor/)** button.

### Why This Matters
A policy with unanswered questions cannot be published, and a policy with placeholder text (e.g., "[INSERT RETENTION PERIOD]") will be flagged as incomplete by an [ISO 27001 auditor](https://docs.autociso.io/console/iso/auditor-portal/). Completing all decisions keeps your policies specific and audit-ready.

### Where to Find It
Open a policy in the editor and click **Decisions**. The **Questions** tab of the editor lists the same questions and their options.