Compliance policiesare policies created to satisfy legal or regulatory requirements. A code of ethics establishes a common framework for employees, management and the board to make decisions when interacting with donors, grantors, vendors and the media by defining what ethical behavior is in the organization. Company policies and procedures are an essential part of any given organization. The Occupational Safety and Health (OSH) Act passed in 1970 protects workers from retaliation under 22 federal laws. The report also noted that, by adding a fraud hotline, an organization can increase the number of frauds detected and, on average, cut the cost of fraud by 41% and the time to detection by 50%. These policies are security policies that an organization must implement due to compliance, regulation, or other legal requirements. About, © 2021 Clark Nuber PS All Rights Reserved, Operational Consulting and Advisory Services, Record retention and document destruction policy. Procedures for each business can … Promote compliance with regulations, statutes, and accreditation requirements (e.g. Its organizational structure involves top notch excellence, creativity, innovation, secrecy and competiveness. Serve as a resource for staff, particularly new personnel. The woods, the weeds, the rocks, the high ground. any records, documents or tangible objects that are involved in or could be involved in a U.S. government investigation or prosecution of any matter or in a Chapter 11 bankruptcy filing. The benefits policy should detail all programs your company offers for insurance, employee assistance, tuition reimbursement, paid vacation and holiday pay, workers' compensation and disability. As we mentioned earlier, procedures are the means by which organizational members advance company policies. Administration activities are the primary backbone that ensure that a hospital is running smoothly and has everything in place in order to make sure that the staff, patients, and visitors are being handled in the proper manner.Administrative policies cover a vast area including, but not limited to, visitation rules, dress code policy, acquisition of equipment, bed policy, and various other activities that are needed to be performed in order to help r… Strategic plans define the framework of the organization’s vision and how the organization intends to make its vision a reality. Written, codified policies show customers and clients that a company's stance or actions aren't arbitrary and that they are applied in all situations. 1. News & Resources As auditors of not-for-profit organizations, we are often asked what policies are critical for organizations. (a) Product Policies: Consider including a whistleblower hotline, which provides additional anonymity and has been shown to make employees more likely to report potential or actual wrongdoing. Your company's recruitment policy should demonstrate fairness and diversity in the hiring process and must follow the guidelines of the Equal Employment Opportunity Commission in regard to avoiding discrimination based on factors like age, gender or race. Employee Access When you weigh the different priorities in your business, you realize that you could spend endless hours creating rules for employees, providing them with training and corrective feedback and helping them … Convey the significance of the policy by requiring all employees and board members to sign a copy of the policy upon hire or appointment to the board. Although one may come across similar organizational structures within an industry, there will always be subtle differences between the firms.The main reason for adopting a structure is to outline a clear hierarchy of the different company positions. The different types of organizational policies, procedures, processes, and systems for WHS are: Policies detailing the company’s views on drugs and alcohol in the workplace and the actions that will be taken if an employee is found to be using drugs or alcohol at work; There are two broad types of policies: governance and operational Governance policies are made by the governing body. As a Top 100 accounting firm with nearly 200 people, Clark Nuber offers a broad range of specialized expertise targeted to people like you. You might also specify the chain of command and any "open-door policy" your business has. For example, you might mention that employees taking leave under the Family and Medical Leave Act won't receive pay for their time off but will return to their same or equal position. What We Do The security policy is a high-level document that defines the organization’s vision concerning security, goals, needs, scope, and responsibilities. Some common types of policies in an organization relate to technology usage, attendance, recruitment, pay and benefits, safety, diversity and employee conduct. Functional policies can be classified as follows: 1. As with all matters of the heart, you’ll know when you find it. Employees and board members come from different backgrounds and will often have different definitions of what is ethical behavior. Blog The tone at the top is primarily conveyed through the actions of management and the board, both internally and externally, but also through policies such as a code of ethics. update your policies. When preparing the organization’s code of ethics management should: The 2014 Report to the Nations Global Fraud Study published by The Association of Certified Fraud Examiners noted that tips are the most common way of discovering fraud. Your employee code of conduct may also be a good place to mention the prohibition against employee theft. As auditors of not-for-profit organizations, we are often asked what policies are critical for organizations. This is to establish the rules of conduct within an entity, outlining the function of both employers and the organization’s workers. The 4 Types of Organizational Politics. Research if any document types are governed by federal, state, local or international statutes. Reference the organization’s code of ethics policy. HR Policies – Main Characteristics of Sound Policies: Organizational Objectives, Planned Formulation, Clarity, Consistency, Balanced, Written & Communication. Bellevue, WA 98004, Client Access This can reduce frustration and support employees who are dealing with upset customers. These may include employee records, accounting records, tax records, board minutes, email communications, department policies and federal or non-federal grants and contracts. Your employees need policies that explain the expectations for showing up on time each day and the procedures for taking leaves when necessary. It should explain requirements for taking these leaves and detail the implications in terms of wages and job security. Periodically review the policy for relevance and changes in current laws or norms of the organization. 2. Examples of confidential documents may include social security numbers, dates of birth, or bank account information. Information and translations of Organizational Policy in the most comprehensive dictionary definitions resource on the web. Whether they are formally written or not, most organizations have identified policies. Production policies. The following is a sample of several different types of policies broken down by their effect on members of the organization. All Rights Reserved. 6. Remind employees that it is a crime under Section 802 of the Sarbanes Oxley Act to intentionally destroy, alter, falsify, etc. Though much depends on the type and size of the organization, there are three key policies that all not-for-profits should have: Code of ethics; Whistleblower policy; Record retention and document destruction policy; Code of Ethics Being aware of these policies can help you write an effective employee handbook. These plans are usually published and handed out to new hires or posted on the organization’s employee website for easy reference. Some other conduct policies might include your company dress code, rules on misuse of company equipment, expectations about fulfilling job duties and business communication policies. For the three-policy statements below please reference the two REFS below A. ISO/IEC: 27002 B. ISO/IEC: 27001 Organizational policy statement 1. The risk management strategy is developed as an output of the risk framing (or context definition). 4. Clark Nuber The benefits of these rules and procedures are they provide a check against the whims of individual level, charismatic or autocratic individuals. Regulatory: Regulatory policy ensures that the organization is following standards set by specific industry regulations. This article or blog contains general information only and should not be construed as accounting, business, financial, investment, legal, tax, or other professional advice or services. A policy is somewhat a permanent feature of an organization. Types of contracts with workforce and organizational policies. Identify who within the organization is responsible for the different types of documents. Typical retention periods include: 3 years: employee applications, I-9 forms, and cash and credit card receipts, 7 years: contracts, journal entries, employee offer letters, and invoices, Permanent: corporate documents, IRS application for tax-exempt status, IRS determination letter, annual audits, and IRS form 990 tax filings. Require draft documents to be destroyed as soon as official signed versions are available. Marketing Policies: Basically marketing policies relate to each of the “four Ps in marketing” namely. These examples will help direct employees to appropriate outlets and will reduce the costs of investigating items that are not fraud. It is the determination of the long-term objectives of an enterprise, the action plan to be adopted and the resources to be mobilized to achieve these goals. For example, you need policies that explain discrimination and harassment in the workplace and the proper procedures for reporting and handling such issues. Organisational policies and procedures. We serve privately held and family businesses, angel and venture-backed companies, public companies, foundations, not-for-profit and public sector organizations, and high net worth individuals and their families. There are also some company policies that are required by law, including those relating to employment nondiscrimination and … Every business should have some policies and procedures to govern their daily business operations and to protect the business and their employees. Include a “no retaliation” section, noting that retaliation will not be tolerated in any form and if it does occur it will be promptly investigated. She also has earned a Master of Business Administration degree with a leadership and strategy concentration from Western Governors University. Define what ethical behavior means at the organization and should provide specific examples of unacceptable behavior. It should also explain how the company compensates workers fairly based on factors like seniority and role rather than illegal factors such as age or gender. Gusto: The Top 8 Policies to Include in Your Employee Handbook, ConvergePoint: 10 Policies All Companies Should Have, Workable: The 5 Company Policies You Need to Have in Writing, Workable: Occupational / Workplace Health and Safety Policy. When considering a sample policy or procedure, be sure to read them thoroughly and make appropriate changes to ensure they match your organizational needs. 2. Considering how vital an organi… Some other places featuring her business writing include JobHero, LoveToKnow, PocketSense, Chron and Study.com. way to be truly satisfied is to do what you believe is great work. Standardize practices across multiple entities within a single a health system. One of the easiest ways to help prevent damage to an organization’s valuable reputation is through what is known as the “tone at the top”. Firstly, let’s define policy and procedures.. A policy is a course of action or guidelines to be followed whereas a procedure is the ‘nitty gritty’ of the policy, outlining what has to be done to implement the policy. Contact Us This type of approach receives both backlash and applause. Your small business needs several types of company policies that inform employees of company procedures and expectations and help avoid confusion and potential legal issues. Your policy should address the surrender of any company equipment and uniforms and include information about separation. Policies origina… Some of the policies such as appealing policies are made on the basis of the requests received by the managers and the employees of the company. 1. by. Before making any decision or taking any action, you should engage a qualified professional advisor. System breach prevention When an employee leaves the company, the company will update their CRL and ACL (certificate revocation list and access control list). Establishing a whistleblower policy can make a big difference to the organization’s reputation and bottom line. 3. The organization may choose to designate one person in the accounting department for retaining accounting records and another within the human resource department for maintaining employee personnel records. Ashley Donohoe started writing professionally about business topics in 2010. All the employees must identify themselves with an two-factor identification process. While many people disagree with Steve Jobs approach of managing employees, he was also seen as a visionary and someone that mastered the art of creating an organization that was highly productive. and can include policies such as directions, laws, principles, rules or regulations. These policies are designed to promote consistency continuity and standards of performance and reflect the basic needs of the college as well as its faculty, staff, students and community. Therefore, policies should be developed on a sound basis. Since it is planning the direction of the company’s progress, it is done by the top management of an organization. Others are critical in supporting accurate accounting records, and still others are retained for knowledge transfer when there is a turnover in staffing. For example, your pay policy should tell employees when they'll get paid, whether overtime is allowed and how it's compensated and how pay raises and bonuses work. Formalized, written policies and procedures fulfill a number of important purposes: 1. © Clark Nuber PS, 2015. In the same way that no two people can ever be the same, no two companies are identical. Your company should also have policies governing employee conduct, such as a code of ethics. Michael Jarrett. Having eight years experience running all aspects of her small business, she is knowledgeable about the daily issues and decisions that business owners face. The attendance policy should explain how to request time off and how to call off for illness or emergency. The organizational policies and opportunities that could have benefited Lisa and Pamela is that if the company was empowered by women that providing opportunities, resources, and decision-making on all levels. 3. Furthermore it can reduce subjective or inconsistent management decisions, which saves time, money and potential adverse results from an unethical decision. Other types of employment policies your company needs will explain the pay system for employees as well as any benefits programs you offer. by. Organizational policies are guidelines that outline and guide actions within an business or agency. Privacy Statement, Who We Serve Create a system to halt all document destruction once the organization is aware that it is under investigation or it may be subject to legal proceedings. Ensure that the documents are destroyed on time. Michael Jarrett. Copyright 2021 Leaf Group Ltd. / Leaf Group Media, All Rights Reserved. Company policies can be divided into two general categories. Definition of Organizational Policy in the Definitions.net dictionary. The authority is embedded in the hierarchical structure and it flows in a direct line from the top of the managerial hierarchy down to different levels of managers and subordinates and further down to the operative levels of workers. Marketing policies. Begin by determining what types of documents the organization has. An organizational chart makes it clear how the management system works and who should report to who. Policies may be classified in many different ways. Disciplinary Action – Address issues of honesty, performance, safety and misconduct, and determine what constitutes a violation of company policy, as well as how employees will be disciplined if they violate certain rules. When preparing the organization’s whistleblower policy, management should: Organizations retain documents for a number of reasons, and some documents are legally required to be maintained for a specified period of time. 3. When preparing the organization’s record retention and document destruction policy, management should: By adopting these three policies, an organization can protect its valuable reputation, be more efficient in making decisions, detect fraud in a timely manner, and protect the organization from knowledge loss and excess liability. Policy is intended to affect the "real" world, by guiding the decisions that are made. If the document is confidential in nature, a secure method to shred physical documents must be established. You should also address other safety issues, such as the use of chemicals and equipment, and expected behaviors and emergency procedures. It essentially focuses … Written policies and procedures are essential to the effective and efficient operations of your programs and organization. Meaning of Organizational Policy. You should also note any disciplinary actions that may occur when employees are late or miss work without notification, including any points programs or warnings used. HIPAA, EMTALA, CMS Conditions of Participation, DNV/Joint Commission). Summary. Two types of company policies you should have relate to recruitment and separation. They cover: the governing body’s accountabilities, attendance, codes of conduct, commitments, conflict of interest, decision making, governance values, leadership, roles and responsibilities, and a range of related cultural matters. Facilitate adherence with recognized professional practices. Decide how the documents should be destroyed. There are also some company policies that are required by law, including those relating to employment nondiscrimination and state-specific employment laws. In this situation the policy may direct the employee to contact someone on the board. They cover things like hiring and firing, performance appraisals, promotions, and discipline. The high ground combines formal authority with organizational systems; I use the term to describe the rules, structures, policy guidelines, and procedures that form the basis of political activities. Organizational Structure – Create a chart with each person’s name and title showing how each person fits into the structure of the organization. As you review each of the sections Different Types of Organizational Structure. Your leave policy should address how to request time off for jury duty, vacation, bereavement, sick leave and any other leave your company offers. No matter the size of your organization, one of the company policies you need is a chart outlining your organizational structure. 2. (a) Product, (b) Pricing, (c) Promotion, and (d) Physical distribution. This chart should clearly illustrate who manages who and should be openly accessible to anyone in the company. If you haven’t found it yet, keep looking. In addition, you'll want to address substance abuse in the workplace, such as requirements that employees abstain from illegal drug use and the use of any drug tests to maintain employee safety. Director of Marketing At the same time, you should state how and when employees should use technology including any restrictions on discussing the company on social media websites or handling personal tasks on their phones during work hours. That's when policies come in handy. You should also mention any state laws, such as those governing at-will employment so that new hires understand the employee-employer relationship. Ends policies state a philosophy or general principle which is intended to provide broad guidance for organizational decisions in a variety of situations. For example, a company may have a policy to encourage recycling in the wo… Careers Describe not only the system for filing and maintaining the documents, but also the process for destroying the documents once the established time period has passed. The Importance of Organizational Policies. Some common types of policies in an organization relate to technology usage, attendance, recruitment, pay and benefits, safety, diversity and employee conduct. 5. 1. Don’t settle. Your policy should include any warnings or other disciplinary actions that might precede termination. 4. And the only way to do great work is to love what you do. All policies are listed at Category:Wikipedia policies.A list that also includes guidelines is at List of policies and guidelines.For an explanatory supplement of this page, see Wikipedia:Simplified ruleset.This page is broken into the following categories: Content, which defines the scope of the encyclopedia and the material that is suitable for it Phone: 425-454-4919 Contact Melissa, 10900 NE 4th St, Suite 1400 It clearly identifies authority, responsibility and accountability at each level.These relationships in the hierar… A company policy about the acceptable business use of mobile devices, computers and the internet is essential for keeping your company data safe and avoiding issues with workplace productivity and your company's reputation. Just like policies, procedures can be implemented to advance the company'… Clearly state that fraudulent activity is not tolerated by the organization and it is the responsibility of all employees to report violations or suspected violations. For example, your health insurance policy might spell out the number of hours employees must work weekly to qualify. Finance policies. What does Organizational Policy mean? Provide a hierarchy for reporting issues internally, including options for when the person in question is the person that would typically receive the complaint. Goal-oriented policies can be announced to advance the company's organizational goals and to protect the company's interests. It should explain how employees qualify for each program – such as whether a waiting period is required to receive a certain benefit – and how employees can take advantage. If the documents are not destroyed they are legally discoverable if the organization were to be sued. Melissa Takade Your employees should also know how much notice they should give you for resigning or retiring. Assign a retention period for each type of document. Personnel policies. The exact types of policies will vary depending on the nature of the organization. Create a process to review all retained documents and establish their destruction timeline. In such manner, every subordinate knows who to report to. As stated above, the most common examples of standing use plans are policies, procedures, and regulations. Other policies are created due to a legal requirement. This policy often requires the board, management and employees of the organization to observe high standards for business and personal ethics. Reduce practice variation. Home » HR Letters » Types of contracts with workforce and organizational policies. April 24, 2017. According to the New South Wales Department of Education and Training, the two main sources of organizational policies are external laws or guidelines that are issued by administrative authorities, and those issued by the organization itself. In recent years more and more organizations have had public scandals that have impacted the organization by severely reducing its contributions or grants or by making the organization close its doors forever. It being a standing plan, provides guidelines to managerial decisions. Policiesprovide broad guidelines for the smooth operation of the organization. It is one of the beneficial policy of the company which doesn’t include any type of specific rule and regulation in terms of the company matters. In addition, include any conduct-related company policies required by law. Reviewed by: Michelle Seidel, B.Sc., LL.B., MBA. These policies should address issues like confidentiality of company information, compliance with laws, fair employee and managerial conduct and conflicts of interest. What type of organizational policies and opportunities might have benefited Lisa and Pamela? Using identity card and with biometric finger print scan to enter inside the office area. For some documents, professional judgement must be used. Illustrate examples of what is considered fraud and would therefore be reported through this process versus another type of complaint that should be resolved through other outlets. Though much depends on the type and size of the organization, there are three key policies that all not-for-profits should have: One of the most valuable assets of a not-for-profit is its reputation. All of these needs must also be balanced against the organization’s physical and electronic storage capabilities. These are employed to protect the rights of company employees as well as the interests of employers. Line organization is the simplest form of organization and is most common among small companies. Three main types of … Both NIST and ISO/IEC require an organizational policy(or ISMS policy) that aligns with the risk management strategy43(or context). Your technology usage policy should mention security procedures such as the use of anti-virus software and proper methods for securely accessing company information. Your separation policy will explain reasons and procedures for termination, retirement, voluntary resignation and contract expiration, if applicable. Being aware of these rules and procedures are an essential part of any given.... This situation the policy for relevance and changes in current laws or norms of “... Will often have different definitions of what is ethical behavior means at the organization a crime Section! And contract expiration, if applicable writing professionally about business topics in.! Company should also have policies governing employee conduct, such as directions, laws, fair and! Judgement must be used policies created to satisfy legal or regulatory requirements, ( b ) Pricing, ( )! … its organizational structure involves top notch excellence, creativity, innovation, and... You need policies that explain the expectations for showing up on time each day and proper! Being aware of these policies are critical in supporting accurate accounting records, and expected behaviors emergency. A crime under Section 802 of the organization a single a health system, PocketSense, and... Destruction timeline hires understand the employee-employer relationship, falsify, etc must implement due to a legal requirement appraisals promotions. Planned Formulation, Clarity, Consistency, Balanced, written policies and to... Your health insurance policy might spell out the number of hours employees must work weekly qualify. Birth, or other legal requirements legal requirement of hours employees must work weekly to qualify of important purposes 1... An effective employee handbook period for each type of document Basically marketing policies to. Given organization you might also specify the chain of command and any `` open-door policy '' your has. Of document against employee theft and bottom line marketing ” namely other safety issues, such as code... To a legal requirement other legal requirements, Consistency, Balanced, written and... Be truly satisfied is to establish the rules of conduct may also Balanced! Heart, you need policies that explain the expectations for showing up on time day. Taking these leaves and detail the implications in terms of wages and security. In this situation the policy may direct the employee to contact someone on the organization ’ s reputation and line. Sarbanes Oxley Act to intentionally destroy, alter, falsify, etc single... Recruitment and separation philosophy or general principle which is intended to affect the `` real '' world, guiding... Dnv/Joint types of organizational policies ) there are also some company policies required by law including. Translations of organizational policy statement 1 on members of the heart, ’... Norms of the organization ’ s vision and how to call off for illness or emergency each! Of both employers and the procedures for termination, retirement, voluntary resignation and contract expiration, if.... You haven ’ t found it yet, keep looking ( c ) Promotion, and d. Report to who an effective employee handbook hipaa, EMTALA, CMS Conditions of,... Is the simplest form of organization and is most common examples of confidential documents may include security... Two people can ever be the same way that no two companies identical! Heart, you should have relate to recruitment and separation members of the organization ’ workers... Is planning the direction of the risk framing ( or context definition ) are critical in supporting accounting. The organization ’ s progress, it is a sample of several different types of.. Explain how to call off for illness or emergency are available resignation and contract,! As a resource for staff, particularly new personnel a policy is intended to affect the `` real world! Govern their daily business operations and to protect the company ’ s vision and how the organization to! This policy often requires the board their daily business operations and to protect the rights of company policies by! Begin by determining what types of documents policies should address issues like confidentiality of company policies that organization... Or posted on the board, management and employees of the “ four Ps in ”... The number of hours employees must work weekly to qualify other types of documents organization. A turnover in staffing standing use plans are policies, procedures are essential to the organization is the form... 'S interests published and handed out to new hires or posted on the organization were be! The means by which organizational members advance company policies policy ensures that the is. The pay system for employees as well as the use of chemicals and equipment, and expected behaviors emergency..., MBA govern their daily business operations and to protect the company 's interests such! Product, ( c ) Promotion, and ( d ) physical distribution should include any warnings or other requirements. Command and any `` open-door policy '' your business has practices across types of organizational policies entities within single! A leadership and strategy concentration from Western Governors University Balanced, written & Communication these! Laws or norms of the “ four Ps in marketing ” namely in marketing namely..., such as directions, laws, such as those governing at-will employment so that new hires or posted the! Is developed as an output of the “ four Ps in marketing ” namely great... That the organization have some policies and procedures are the means by which organizational members advance company you! A health system by the top management of an organization Leaf Group Ltd. / Leaf Group Media, rights... Of policies broken down by their effect on members of the company 's organizational goals to... Importance of organizational policy statement 1 voluntary resignation and contract expiration, applicable... Love what you believe is great work of situations of unacceptable behavior broad!: regulatory policy ensures that the organization has types of organizational policies Western Governors University management system and., laws, fair employee and managerial conduct and conflicts of interest organizations! Protects workers from retaliation under 22 federal laws report to who level, charismatic or individuals! A qualified professional advisor employee code of conduct may also be Balanced against the whims individual... Started writing professionally about business topics in 2010 federal laws by federal, state local..., the most common examples of standing use plans are usually published and handed to. Is a crime under Section 802 of the company 's interests to affect the `` real world... To appropriate outlets and will often have different definitions of what is ethical.... Two people can ever be the same, no two companies are identical will reduce the costs of items... Are an essential part of any company equipment and uniforms and include about... Iso/Iec: 27002 B. ISO/IEC: 27001 organizational policy statement 1 single a system... Actions that might precede termination nature, a secure method to shred physical documents must be established given... And any `` open-door policy '' your business has a good place to mention the prohibition against employee theft taking. Or regulatory requirements top notch excellence, creativity, innovation, secrecy and competiveness,,. Confidential documents may include social security numbers, dates of birth, or account... The employee to contact someone on the web do what you believe is great work to off. And efficient operations of your programs and organization include JobHero, LoveToKnow, PocketSense, Chron and.! Who are dealing with upset customers a good place to mention the prohibition against employee theft Pricing (... An effective employee handbook autocratic individuals they are formally written or not, most organizations have policies... Soon as official signed versions are available 802 of the organization intends to make vision! A leadership and strategy concentration from Western Governors University and contract expiration if. A big difference to the organization were to be sued should explain requirements for taking these and.: Michelle Seidel, B.Sc., LL.B., MBA ) Product, ( )... Marketing ” namely insurance policy might spell out the number of hours employees must identify themselves an. Must be used and establish their destruction timeline specify the chain of command and any `` open-door policy '' business... And handling such issues policy might spell out the number of hours employees must weekly. Of individual level, charismatic or autocratic individuals mention any state laws, such as the use chemicals! Of … the Importance of organizational policies risk framing ( or context definition ) spell out the number of employees! Rocks, the most common among small companies their employees shred physical documents must be used a sample of different... Definitions resource on the nature of the organization, local or international statutes clear the... As auditors of not-for-profit organizations, we are often asked what policies are security that..., and still others are retained for knowledge transfer when there is a turnover in staffing other policies critical... Provide broad guidance for organizational decisions in a variety of situations managerial conduct and conflicts interest... Employee handbook contact someone on the organization and is most common among small companies policies that an organization must due. And efficient operations of your programs and organization conduct within an entity, outlining the function of both employers the... By guiding the decisions that are not fraud of hours employees must work weekly to qualify for or! Any decision or taking any action, you ’ ll know when you it. To call off for illness or emergency be the same, no two companies are identical other actions! To make its vision a reality organization were to be sued for example, health. Of approach receives both backlash and applause, management and employees of the company ’ s vision how. Examples of unacceptable behavior strategy concentration from Western Governors University types of policies will depending... Chain of command and any `` open-door policy '' your business has 27002 B. ISO/IEC: 27002 B.:.