Automatic policy publication is triggered by which condition?

Automatic policy publication is triggered by which condition?

• A. Related control objectives are marked active
• B. Policy is approved by all approvers
• C. Policy is approved by one approver
• D. Policy exception is closed

Answer: (B)

Automatic policy publication happens only after every required approver has signed off. This guarantees that the policy has been reviewed and agreed upon by all stakeholders before it goes live, ensuring governance and alignment across the controls and risk owners. Releasing a policy with only one approval or based on unrelated statuses (like control objectives or exceptions) could publish something not yet fully vetted, which is not desirable.

Automatic policy publication happens only after every required approver has signed off. This guarantees that the policy has been reviewed and agreed upon by all stakeholders before it goes live, ensuring governance and alignment across the controls and risk owners. Releasing a policy with only one approval or based on unrelated statuses (like control objectives or exceptions) could publish something not yet fully vetted, which is not desirable.