Organizations are reponsible for creating an maintaining policies that serve one of the following purposes as noted in the Policy on Policies:
- Improve controls
- Reduce risk
- Increase efficiency and effectiveness
- Elaborate on new compliance regulations or rules
- Enhance understanding of what to do in a specific situation
- Delineate what is in Board of Trustees policy
If what an organization has in place does not serve any of those purposes, it may be consiered an operating procedure or a guideline.
In order to distinguish whether or not a policy is necessary, the organization should review existing policies and create new ones when appropriate.
- The policy is one that the organization currently uses.
- The policy does not need revisions.
- The policy is reflects current operations.
- The policy is in writing or published.
- The policy has been approved by the chain of command.
- The proposed policy does not exist or an older, outdates policy is in use.
- There is a change or revision needed to a current policy.
- No policy is currently in use but needed.
- The policy is not is writing. (Oral tradition is no longer an effective means of passing on information.)
- The policy has not been approved by the chain of command.
Policies must be review according to the Policy on Policies.