---
title: Create, Edit or Revise a Policy
slug: neurons-for-itsm/admin-user-help/enu/latest/create-edit-or-revise-a-policy
createdAt: 2026-07-14T19:16:51.592Z
---

Create a Policy for the written guidelines that your organization communicates to its employees about how they execute security strategy. Policies formalize your organizational approach to achieving Control requirements.

:::hint{type="info"}
To create, edit or revise a Policy, you must log in to Neurons for ITSM as a **GRC Manager**.
:::

**To create a Policy:**

1. Open the **Policy** workspace.
2. Click **New GRC Policy** to open a blank **Policy** form.
3. Enter the information into the fields as required.
   - **Owner Email** and **Business Owner Email** auto-populate based on the **Owner** and **Business Owner** fields.

:::hint{type="info" indent="1"}
Mandatory fields are marked with an asterisk.
:::

4. Click **Save**.
5. In the **Details** tab, enter the information into the fields as required. You can also add attachments in the **Details** tab.
6. Use the **Policy Documents**, **Journals**, **Assessments**, **Audits**, **Assets**, **Compliances**, **Exceptions**, and **Linked Policies** tabs to add supporting records to the Policy.
   - Use the **Exceptions** tab to create new Exceptions, or click (**Go to**) to fully open an existing Exception record associated with a Policy.

:::hint{type="info" indent="1"}
When creating a new Exception from within a Policy record, the **Exception Type** and **Audit** fields are automatically populated in the Exception record form. You should not edit these fields.
:::

:::Paragraph{listStyleType="disc" indent="2"}
Use the **Control** tab to create new Controls.
:::

:::hint{type="info" indent="1"}
You can restore hidden tabs using the **plus** sign (to the right of the tabs).
:::

7. Use the **Approvers** tab to link users who must approve the Policy. You must specify Approvers before setting the Policy status to **Pending Approval**. When the Policy is in **Pending Approval** status, the **Approval Vote Tracking** tab appears.

:::hint{type="info" indent="1"}
The Policy record is locked and cannot be edited when in **Pending Approval** status. Also note that linked records cannot be edited when opened from a link.
:::

:::Paragraph{listStyleType="disc" indent="2"}
Approvers select the appropriate Approval on the **Approval Vote Tracking** tab, and can select **Approve** or **Deny**.
:::

:::Paragraph{listStyleType="disc" indent="2"}
If all the Approvers approve the Policy, the status changes to **Active**.
:::

:::Paragraph{listStyleType="disc" indent="2"}
If any Approver denies the Policy, the status changes to **Revision Required**. The Policy originator can go back and make the changes required for approval.
:::

8. Click **Save**.

:::hint{type="info" indent="1"}
Click **Refresh** If changes you made or relevant tabs are not shown in the record after you have saved it.
:::

## Edit a Policy

:::hint{type="info"}
When a Policy record's **Status** is set to **Cancelled** or **Retired**, it can no longer be edited.
:::

**To edit a Policy:**

1. Double-click the Policy to open the details.
2. Edit the information as required.
3. Click **Save**.

## Revise a Policy

When a Policy is revised, the existing Policy is cloned and a new Policy is created. The information in the existing Policy, including links (except those in the **Approvers** and **Approvals** tabs) and attachments, are copied over to the new Policy. The existing Policy is retired, and can no longer be edited.

:::hint{type="info"}
A Policy must be approved or retired before it can be revised. Approve a Policy on the **Approval Vote Tracking** tab, which is displayed when the Policy is in **Pending Approval** status. When approved and the Policy status is **Active**, the **Revise Policy** button is displayed in the Policy. The **Revise Policy** button is also displayed in retired policies.
:::

**To revise a Policy:**

1. Double-click the Policy to open the details.
2. Click **Revise Policy**.
3. Click **Yes**.