Policy Editor

This is the help text the console shows in the help panel on this page.

The Policy Editor is where you refine a single ISO 27001 policy document. The policy text sits in a plain text box on the left; a sidebar on the right shows related information.

Editor Features

• Text editing: Edit the policy content directly. It auto-saves shortly after you stop typing, and you can also click Save.
• Controls Covered: The Annex A controls this policy is mapped to.
• Version History: Previous versions with their dates. Click Restore to bring one back while the policy is not published.
• Pending Decisions: Open AI questions for this policy. When the policy needs input, click Answer Pending Decisions to resolve them.

Policy Structure

A well-structured ISO 27001 policy should include: Purpose, Scope, Policy Statement, Roles & Responsibilities, Related Documents, and Review Cycle. The AI-generated draft follows this structure.

Publishing

Click Publish (shown when the policy is Draft or Ready) to issue the policy. A published policy is locked for editing. Its Acknowledgments panel then shows how many employees have acknowledged it, with Refresh and Send ack requests buttons. Use Back to Policies (top left) to return to the list.