Published: April 25, 2008

The Policy SMF describes the major processes involved in the management of policies for the IT organization. These processes are needed to clarify management directives, capture them in policies that are well stated, appropriately validated and communicated, and effectively enforced. The end result is an organization that is compliant with management directives.

The major policy management processes described by the Policy SMF are:

• Determine areas requiring policy.
• Create policies.
• Validate policy.
• Publish policy.
• Enforce and evaluate policy.
• Review and maintain policy.

Feedback

Please direct questions and comments about this guide to mof@microsoft.com.