Governance Framework Compliance Statements

Governance Framework

Any Implementation Guide compliant to the SAIF CD:

• SHALL identify specific Governance Definition Processes that describe which groups have the authority to define which Precepts and their corresponding Roles, Processes and Metrics
• SHALL identify specific Governance Communication Processes that communicate to all impacted groups the nature of the Definition Processes, Precepts defined and means to ask for exceptions to Precepts
• SHALL identify specific Governance Appeal Processes for groups to request exceptions to communicated precepts and criteria to evaluate exception requests
• SHALL identify specific processes to evaluate existing precepts to determine whether they are achieving their intended purposes and are still relevant as circumstances change
• Governance Definition Processes SHOULD include a specific Risk Assessment to identify areas to govern
• Precepts that are defined SHALL identify which risks they are intended to mitigate
• Precept definitions SHALL identify
  • Roles affected
  • Processes to which the Precepts apply
  • Metrics used to determine Precepts have been applied
• Precept definitions SHOULD identify
  • Consequences of not following precepts
  • Clarify where authority to set precepts originates (which organizational policy, legislation regulation)
• Role definitions SHOULD identify
  • What actions are permitted, obligated or prohibited by the Role
  • Whether the Role can further delegate authority to carry out part of permitted or obligated actions