
The following questions are designed to help professionals determine the
importance of efficient policy and procedure management and the measurable
accountability of employees.
If a security policy or procedure is out of date or poorly defined, could
your organization be at risk?
RightProcess ANSWER: Using RightProcess you can define a review date for each
individual document to help policy owners ensure the accuracy of the information.
When the date expires, an automatic reminder is sent to the policy owner(s) who
in return is accountable for ensuring the content is reviewed and kept current. Management has access to this
information which allows them to easily monitor both the policies and the people who are accountable for keeping them
current.
If an employee does not adhere to a certain policy, could your
organization be at risk?
RightProcess ANSWER: If an employee fails to adhere to a specific policy and the
result is that the organization is put at risk or exposed, management may
need to take action against the employee. Using the Individual Activity
Report, management can easily reference the employee's sign off history
(measurable accountability) as it relates to his or her acknowledgements
regarding the policies and procedures that map to the employee's job responsibilities.
Would you be concerned if an employee who was terminated for violating a
department-specific operating procedure filed a lawsuit against the company? In other
words, concerned about your ability to prove he was aware of his job responsibilities.
RightProcess ANSWER: RightProcess has an extremely powerful feature called "Point in Time."
Using this feature, managers can select a specific date and RightProcess will generate
a report that includes the precise version of a policy or procedure that was in
effect on that date and, as of that date, exactly which employees had acknowledged
the policy and which ones had not. Furthermore, the Individual Activity Report can
easily be generated to view all activity (in one consolidated and easy to read report)
that's specific to each employee.
Have you invested in process-improvement methodologies such as Six
Sigma or ITIL in an effort to increase efficiencies and/or improve performance but are concerned with the associated documentation?
In other words, process methodologies are one thing but what about the associated documentation?
RightProcess ANSWER: To ensure the documents being defined and documented by the process engineers is consistent in format RightProcess
offers total flexibility with respect to an organization's ability to design and customize
a series of templates which drives consistency across the organization.
Has there ever been a misunderstanding or confusion regarding the
most current version of a particular policy or procedure?
RightProcess ANSWER: RightProcess includes a version control system that not only tracks
all current versions but makes past versions easily accessible to management if and
when the need to access them arises. The Audit Trail feature is also very helpful at times when it
is necessary to see precisely who changed what, when and why.
Do you ever struggle to get your outsourcer to execute in a manner that you
feel has already been clearly defined and documented?
RightProcess ANSWER: Using RightProcess you can streamline the communications between you
and your outsourcer. Leveraging RightProcess via our SaaS offering, Organizations
can directly communicate defined policies and procedures with their Outsource partners
and then monitor them real-time, tracking the Vendor's internal progress in communicating
with assigned employees.
When a policy or procedure changes, is everyone notified of the change
in a timely and efficient manner whereby it gets quickly infused into the organization?
RightProcess ANSWER: When using RightProcess
employees are automatically notified when a policy or procedure changes. Furthermore, policy owners can define a specific amount of time
whereby employees are required to acknowledge the change (sign off) within the defined time period or they will be considered "Delinquent." All of the data
associated with when the change was made, how long it takes employees to acknowledge the change, who is "Delinquent" and who is "On Time" is all
easily accessible to the appropriate management figures.
|