0415 Governance Responses¶

Governance policies outline how a governance domain will provide support to the governance drivers. They are said to be the "responses to the challenges proposed by the governance drivers".

Governance policies are written in language that describes the desired end state or method of working. They also describe the costs and benefits of achieving this end state and other related consequences. They are further refined using governance controls that define specific actions in specific situations.

GovernancePolicy entity¶

The GovernancePolicy entity is a type of GovernanceDefinition.

There are four main types of policy:

• Principles define the overall values and guidelines for the organization.
• Obligations define specific actions or processing that must be accommodated.
• Approaches define new initiatives, best practices and ways of working that will be adopted.
• Risks define the likelihood and impact of a threat occurring.

GovernancePrinciple entity¶

The GovernancePrinciple entity defines a policy that describes an end state that the organization aims to achieve.

GovernanceObligation entity¶

The GovernanceObligation entity defines a policy that describes a requirement, often coming from regulations, or from the organization's core values, that must be met.

GovernanceApproach entity¶

The GovernanceApproach entity defines a policy that describes a method that should be used for a particular activity, or a new activity/initiative that will be adopted.

Risk entity¶

The Risk entity describes the probability that a threat will materialize and the potential consequences if it does. It combines the likelihood of an event occurring with the severity of its impact on assets or objectives. Risk assessment evaluates exposure, potential harm, and vulnerabilities, transforming abstract threats into actionable insights for mitigation and decision-making. Risks can be expressed qualitatively or quantitatively, often factoring in threat, vulnerability, and consequence.

GovernanceResponse relationship¶

The GovernanceResponse relationship links a GovernanceDriver entity to a GovernancePolicy entity to show that following the policy will help to support the governance driver.

GovernancePolicyLink relationship¶

The GovernancePolicyLink relationship connects two related GovernancePolicy entities.

Raise an issue or comment below