Open Group IT4IT Reference Architecture Policy Component

​Purpose

Manage creation, review, approval, and audit of all IT policies.

Main Functions

• Shall align and map IT Policies to Service Architectures.
• Shall review and approve IT policies based on roles and responsibilities. It shall manage Policy distribution and acceptance based on predefined templates and schedules for designated IT stakeholders.
• Should maintain complete Policy revision history, and review period or obsolescence rules set for all Policies.
• May log and track IT Policy exceptions through an issue management mechanism. It may provide a consistent tracking feature for exception identification, evaluation, and status report leading to corrective action.
• Shall provide visibility into IT Policy attributes such as types, status, non-compliance, audit history, and issues.
• Shall manage overall IT governance Policies, and Policies applied to or associated with the particular services that may be managed downstream during service design.
• Shall manage IT security and regulatory Policies by incorporating external and internal security and regulatory compliances.
• Shall define pricing/costing Policies and capture information related to Service Contracts.
  

• Shall associate one or more policies to one or more Conceptual Services.