Visier Corporate Policies
Policies are key in helping Visier achieve its organizational and IT governance objectives, operations, and strategic plans. Furthermore, they play an important role in ensuring Visier continues to protect information assets, systems, and personnel while meeting customer commitments.
Policy Composition
Visier’s policies are designed to reinforce accountability to internal and external stakeholders, consider business risks and applicable regulatory requirements, and assist in the implementation of internal controls that ensure information assets, systems, and personnel are adequately safeguarded. Each policy defines and adheres to the following format:
- Purpose: Provides objectives and background information related to the policy.
- Scope: Defines the assets, personnel, or domains the policy applies to.
- Definitions: Defines meaning to key terms within the policy.
- Policy Requirements: Contains policy statements that relate to key areas of the policy topic.
- Violation and Exceptions: Describes disciplinary measures upon failure to comply with the policy.
- References: Provides references to the standards, frameworks, and/or regulations the policy is based on.
- Roles and Responsibilities: Defines roles and responsibilities of stakeholders and/or teams that are key in developing, maintaining, and implementing the policy.
- Approval and Revision History: Tracks policy versions, type of revisions, approval, and reviewer information.
Industry Standards
The structure and content of Visier’s policies are based on several industry standard frameworks, best practices, laws, and regulations including but not limited to:
- ISO/IEC 27001; ISO/IEC 27002
- ITIL and COBIT frameworks
- Relevant publications from the United States National Institute of Standards and Technology (NIST)
- EU-U.S. Data Privacy Framework (DPF)
Visier Corporate Policies Overview
Visier does not share organizational policies in their entirety with external parties due to confidentiality reasons. In lieu of sharing the individual policies, the following table has been prepared to provide customers and prospects a brief description of a select list of Visier policies as it pertains to key business practices.
Policies are reviewed and approved by Executive Management at least annually and are made readily available to all Visier employees on the corporate intranet. Employees are trained on select policies as part of the new hire onboarding process and on an annual basis.