eGRC SuiteSmart MemoMicrosoft

Policy Management & Staff Attestation

Draft, approve and publish policies, then collect staff attestation that they have read them, with chasers and a report you can hand an auditor.

Request a Demo
Policy Management & Staff Attestation, what the product delivers

Policy management is a module of the eGRC Suite. See how it fits with risk and compliance.

See the eGRC Suite

Highlights

Policy lifecycle Attestation campaigns Review reminders Audit-ready reports

Sound familiar?

  • Nobody is sure which version of a policy is current
  • Policies are emailed out and nobody can prove they were read
  • Reviews lapse because nobody was reminded
  • When an auditor asks who approved the current policy, finding out takes days

Know which policy is current, who approved it and who has read it

Having a policy is not the same as people following it. This solution takes a policy through drafting, review, approval and publication, then asks the staff it applies to confirm they have read it. Anyone who has not responded gets a reminder. When an auditor asks, the answer takes a moment, not a week.

Draft, approve and publish

Drafting and review

Move a policy through drafting, review and approval, with every sign-off recorded and visible.

Review cycles

Set a review cycle for each policy and get told before it lapses, so nothing quietly goes stale.

Published version and history

Publish the approved version for everyone, and keep every superseded version retrievable.

Prove it was read

Attestation campaigns

Send a policy to a staff group and ask each person to confirm they have read and understood it. The response is recorded with a date.

Automatic reminders

People who have not responded are chased automatically, and you can see exactly who is outstanding.

Targeted groups

Send the right policies to the right people: all staff, a department, a role or a new joiner.

Show it to the people who ask

Link policies to risks and controls

See which risks and controls each policy governs, so a policy change shows what it affects.

Attestation reports

Export a report for a specific policy and period, ready for an auditor or a regulator.

Works with your memo flow

Policy attestations can run alongside memos and approvals in Smart Memo, so staff handle both in one place.

eGRC Suite pricing

Start with the register, add compliance and policies when you are ready, and consolidate groups at Enterprise.

Essentials

Get the register out of the spreadsheet.

$7,200

per year

about $600 a month, billed annually

Non-profit and academic: $5,000 a year

  • Risk register with inherent and residual scoring
  • Control library with testing and evidence
  • Issues and actions tracked to closure
  • Immutable audit trail
  • Heat map and committee export
  • Entra ID single sign-on
Request a quote
Best fit for most organizations

Professional

Run the whole compliance cycle in one place.

$18,000

per year

about $1,500 a month, billed annually

Non-profit and academic: $12,500 a year

  • Everything in Essentials
  • Compliance obligations register and filing calendar
  • Policy lifecycle with staff attestation campaigns
  • Incidents, loss events and near-misses
  • Risk appetite thresholds with breach alerts
  • Export into an eBoard meeting pack
Book a demo

Enterprise

Consolidate a group and answer to several regulators.

From $36,000

per year

about $3,000 a month, billed annually

  • Everything in Professional
  • Multiple entities with group roll-up
  • AI assistance for drafting and control gap detection
  • Hosting and data residency options
  • API access and custom taxonomies
  • Named implementation lead
Talk to an expert

Better together

Governance Suite: $22,500 a year

eBoard Professional + eGRC Professional. About 12% less than buying them separately ($25,500).

Ask about the suite
  • Implementation is separate: a quick start from $3,500, typically $6,000 to $15,000 depending on registers to load and integrations.
  • Billed annually. Monthly billing, where offered, costs 20% more.
  • Non-profit and academic organizations get 30% off subscriptions after a quick verification.
  • Prices exclude VAT (16% in Kenya) and withholding tax.

Not sure which fits? Tell us your team size and what you use today and we will point you to the right option.

Next Steps

  1. 1

    Tell us how it works today

    A short call about how policies runs in your organization right now, who is involved, and where it hurts.

  2. 2

    See it with your own process

    We set up a working demo using your steps and wording, so you judge it on your reality and not a generic sample.

  3. 3

    Agree scope, then build and launch

    You get a clear plan, timeline and cost before we start. We configure, train your team and stay with you after go-live.

Questions we hear most

Can we ask staff to confirm every year?

Yes. Set a review cycle and a recurring attestation campaign, and the system sends them out and chases responses.

Can we see who has not attested?

Yes. Outstanding people are listed by name, department and policy, and reminders go out automatically.

Can new joiners be asked to attest to key policies?

Yes. Attestation can be tied to the onboarding journey so new starters confirm the essential policies in their first days.

Can it be part of eGRC or run on its own?

Both. Policy management is a module of the eGRC Suite, and attestation can also run through Smart Memo for organizations that want it alongside memos and approvals.

Will old versions stay available?

Yes. Superseded versions are kept and retrievable, with their approvals.

More solutions you may need

Documents & Collaboration

SharePoint EDMS

Keep every document in one secure place, with versions, approvals and e-signatures, so people stop emailing files around.

Governance & Workflow

Memo Management & Approvals (Smart Memo)

Draft, route, approve and sign memos, requests and decisions in one place. Every action has an owner, a timestamp and a trail, and approvers can act from a phone.

Documents & Collaboration

SharePoint Intranet

A company intranet your staff will open every day: news, policies, forms, leave requests and onboarding in one place.

Interested in Policy Management & Staff Attestation?

Let's explore how it can work for your organization.

Talk to an Expert