Policy Manager

Successful data governance programs rely on well-defined policies and regulations to safeguard both data and users. Policy Manager simplifies this process by offering a place to create and manage data policies.

Policy Manager allows you to store and show the metadata of your policies and regulations, allowing you to link the metadata to your knowledge graph. It provides an overview of your organization’s governance assets, and key functions to adopt, implement, and monitor the digital policies for your organization.

Policy Manager helps keep your data safe by classifying data based on sensitivity and linking these classifications to specific data. For example, personal information, which requires stringent protection, can be managed efficiently. Your Privacy team can create data classification policies to classify data according to its sensitivity. They can then link the Policy asset to relevant resources to track compliance.

Note Policy and Standard assets can be created only in the domains of the type Policy Domain.

Key benefits

With Policy Manager, you can have an overview of the organization’s governance assets:

  • Standards, such as ISO-standards or other local standards.
  • External regulations, such as GDPR.
  • Entities, such as EBA, ISO, EC, and FDA.
  • Internal regulations, such as policies, goals, and constraints.
  • Controls, such as a dissemination plan.
  • Risks, evaluation, and mitigation, such as privacy risk and market access risk.
  • Accreditation and certificates, such as conformance certificates.

You can also have an overview of the policy lifecycle:

  • Adoption: See the regulations and the respective regulations, paragraphs, and sections to check the adoption of the applicable regulations throughout the organization.
  • Compliance: Monitor how the organization’s data governance program can be traced to the policies and if there are compliance gaps.
  • Risks: Define the risks and their mitigation rules, and trace them to the policies and data assets.

Opening Policy Manager

You can open Policy Manager if you have the Product Rights > Policy Manager global permission. To open Policy Manager, on the main toolbar, click Products icon → Policy Manager.

Policy Manager contains Governance assets such as business rules, data sharing agreements, policies, and rules. You can create your own view or switch to another view.

Image of Policy Manager

Use cases

Policy Manager helps keep your data safe by:

  • Classifying data based on sensitivity.
  • Connecting these classifications to specific data.

Personal information

In any organization, personal information needs to be adequately protected. Typically, your Privacy team sets up the Data Classification Policy, where they classify the data based on how sensitive or critical it is.

Consider the following three classifications for sensitivity:

  • Public data: Least sensitive data.
  • Private data: Slightly more sensitive than public data.
  • Restricted data: Most sensitive data and therefore needs the highest level of protection.

These classifications help determine what level of security is needed for the applications that store or move the data.

A Policy asset and its standards can be linked to the relevant assets, such as Data assets or Technology assets, through the "complies with" relation.

The following image shows the standard sub-assets of the Data Classification Policy asset.

Types of data

The following image shows a diagram depicting how the Data Classification Policy asset is cascaded down into logical and physical data layers.

Image of a Data Classification Policy diagram

Retention policy

Retention policy defines how long data should be retained. For example, some personal data might need to be stored only for one year. Policy Manager helps enforce these retention policies, ensuring that information is removed when it is no longer needed.

Image of a Retention Policy

Asset types

Policy Manager uses the following out-of-the-box asset types.

Asset type Public ID
Governance Asset GovernanceAsset
Data Sharing Agreement DataSharingAgreement
Policy Policy
Standard Standard
Rule Rule
Business Rule BusinessRule

Attribute types

Policy Manager uses the following out-of-the-box (OOTB) attribute types. The Used in asset type column represents the OOTB asset types that include the given attribute type in their global assignment by default.

Attribute type Public ID Used in asset type
Description Description

Governance Asset

Data Sharing Agreement

Policy
Standard
Rule
Business Rule
Purpose Purpose

Governance Asset

Data Sharing Agreement

Policy
Standard
Rule
Business Rule
Exception Scenario ExceptionScenario

Governance Asset

Data Sharing Agreement

Policy
Standard
Rule
Business Rule
Measurement Measurement

Governance Asset
Policy
Rule
Business Rule
Descriptive Example DescriptiveExample

Governance Asset
Policy
Standard
Rule
Business Rule
Inclusion Scenario InclusionScenario

Governance Asset
Policy
Standard
Rule
Business Rule
Effective Start Date EffectiveStartDate

Governance Asset
Policy
Rule
Business Rule
Effective End Date EffectiveEndDate

Governance Asset
Policy
Rule
Business Rule
State Changed Date StateChangedDate Data Sharing Agreement
Note Note Policy
Standard
Business Rule
Scope Scope Policy
Last Review Date LastReviewDate Standard
Loaded Rows LoadedRows Business Rule
Non Conformity Score NonConformityScore Business Rule
Conformity Score ConformityScore Business Rule
Passing Fraction PassingFraction Business Rule
Result Result Business Rule

Relation types

Policy Manager uses the following out-of-the-box (OOTB) relation types. The Used in asset type column represents the OOTB asset types that include the given relation type in their global assignment by default.

Relation type Public ID Used in asset type
applies to Asset AssetCompliesToGovernanceAsset

Governance Asset

Policy
Standard
Rule
Business Rule
complies to Governance Asset AssetCompliesToGovernanceAsset Governance Asset
Policy
Standard
Rule
Business Rule
is grouped by Governance Asset GovernanceAssetGroupsGovernanceAsset

Governance Asset
Policy
Standard
Rule
Business Rule
groups Governance Asset GovernanceAssetGroupsGovernanceAsset

Governance Asset
Policy
Standard
Rule
Business Rule
violated by Issue GovernanceAssetViolatedByIssue Governance Asset
Rule
resolves Issue GovernanceAssetResolvesIssue Governance Asset
Rule
impacted by Issue IssueImpactsAsset Governance Asset
Data Sharing Agreement
Policy
Standard
Rule
is requested by Business Dimension DataSharingAgreementIsRequestedByBusinessDimension Data Sharing Agreement
requires Data Usage DataUsageIsRequiredByDataSharingAgreement Data Sharing Agreement
includes Standard StandardIsIncludedInPolicy Policy
Standard
is enforced by Rule PolicyIsEnforcedByRule Policy
Standard
is enforced by Managed Control ManagedControlEnforcesPolicy Policy
applies to Compliance Target ComplianceTargetCompliesToPolicy Policy
is included in Policy StandardIsIncludedInPolicy Standard
governs Asset AssetGovernedByGovernanceAsset Business Rule
governed by Governance Asset AssetGovernedByGovernanceAsset Business Rule
Note No out-of-the-box complex relation types are included in the global assignments of any Policy Manager-related asset types.