Policy Open Decisions

This is the help text the console shows in the help panel on this page.

When AutoCISO’s AI generates a policy document, it may identify specific questions that need a human decision before the policy can be finalized. These are policy-specific gaps where the AI cannot make assumptions, for example who the CISO is, what your password minimum length is, or how long audit logs are retained.

How Decisions Work

1. The page shows one question at a time, with a progress bar and a “Question X of Y” counter.
2. Pick one of the listed options. The option the AI suggests is tagged AI recommends.
3. Click Next to save your answer and move on (the last question shows Finish). Use Previous to go back to an earlier question you have not yet answered.
4. Once every decision is answered, the policy status changes from Needs Input to Ready, and the page shows “All decisions resolved!” with a Go to editor button.

Why This Matters

A policy with unanswered questions cannot be published, and a policy with placeholder text (e.g., “[INSERT RETENTION PERIOD]”) will be flagged as incomplete by an ISO 27001 auditor. Completing all decisions keeps your policies specific and audit-ready.

Where to Find It

Open a policy in the editor and click Decisions. The Questions tab of the editor lists the same questions and their options.