Skip to content

Policy management and ERM

Keep your policies current and your risks in check.

Manage policies, controls, and issues, and run enterprise risk assessments — operational, technology and cybersecurity, business continuity, and more — while automatically checking for regulatory changes and keeping a complete history of every update.

Book a demo

What you get

Policy Management & ERM, in detail.

  • Policy register with editions

    Every policy has editions and revisions, an in-force version, and a review, approve, and promote workflow with the last-approved date on record.

  • Requirements extraction

    Kobalt turns each policy into a structured set of requirements, so you can see exactly what it commits you to.

  • Regulatory review of drafts

    Check a draft against the regulations and standards it should satisfy. Findings cite both the rule and the policy section.

  • Regression detection

    Re-review a new edition against the open findings of the last one and catch commitments that quietly disappeared.

  • Controls and issues

    Keep a controls library linked to the policies and regulations it supports, and open issues with owners and due dates when a control or policy falls short.

  • Enterprise risk assessments

    Run enterprise risk assessments — operational, technology and cybersecurity, business continuity, and governance — scored on the same platform, so policies, controls, and the risks they mitigate stay connected instead of living in separate spreadsheets.

  • Regulatory-change monitoring

    Kobalt watches the regulations your policies depend on and flags when a change means a policy needs another look.

  • Executive memos

    A short board memo, filled into your Word template, that explains what changed from the edition in force and why.

  • Reports

    Export a PDF of findings with cited text and, if you want, the dismissed items and their reasons.

Workflow

How a review runs.

  1. 01

    Upload

    Bring in privacy, AML, information security, access control, marketing, and other policies.

  2. 02

    Map

    Requirements are extracted and lined up against the regulations and frameworks they serve.

  3. 03

    Review

    Each draft is checked for gaps and regressions, with citations to the rule and the section.

  4. 04

    Approve

    Promote the edition, record the approval, and hand the board a memo that writes itself.

Outputs

What leaves the system.

Everything exports in a form your auditors, board, and vendors already use.

  • Policy register with in-force editions
  • Requirement-level findings with citations
  • Version-over-version regression list
  • Executive memo (DOCX)
  • Findings report (PDF)

Questions

Common questions.

Can we draft policies in Kobalt?

Yes. Draft Policies and Drafting Templates let you start a new edition from a template and run it through review before it is promoted.

See Policy Management & ERM on your own work.

Book a demo [email protected]