Policy Lifecycle
Documentspolicy-lifecyclePolicy Lifecycle is an Agent Skill for documents published in the GRCEngClub/claude-grc-engineering repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
Manages policy documents through their full lifecycle. Reviews policies for gaps, suggests updates based on framework changes, and tracks approval workflows.
QUICK START
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/GRCEngClub/claude-grc-engineering/blob/HEAD/plugins/grc-internal/skills/policy-lifecycle/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/policy-lifecycle, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
Policy Lifecycle Manager
Manages policies from creation through retirement.
Capabilities
- Policy Creation: Draft new policies from templates
- Gap Analysis: Compare policies against framework requirements
- Version Control: Track changes between policy versions
- Review Scheduling: Manage annual policy review cycles
- Approval Workflows: Document approval chains
Policy Lifecycle Stages
- Draft: Initial policy creation
- Review: Stakeholder and legal review
- Approve: Management approval
- Publish: Release to organization
- Monitor: Track compliance and effectiveness
- Update: Periodic reviews and updates
- Retire: End-of-life and archival
Policy Types Supported
- Information Security Policy
- Acceptable Use Policy
- Data Classification Policy
- Incident Response Policy
- Business Continuity Policy
- Access Control Policy
- Change Management Policy
- Vendor Management Policy
Output Formats
- Policy documents (Markdown, DOCX)
- Redlined change comparisons
- Policy inventory matrices
- Review schedule calendars
- Approval documentation