Policy Scan Enterprise · For groups
We read the governance documents your group has already published, and show where policy becomes procedure and action, and where it stops.
We read only published documents or documents you choose to send. We do not see internal documents and draw no conclusions about internal practice. The brief is not a legal opinion, an audit statement or a certification.
I kept reading your blueprints. This time, I found a purchasing policy. It says who follows up suppliers, which requirements apply, and when management reviews them. I can build from that. Then I opened the health and safety policy. It says the manager follows up when a need arises. I wonder which procedure the manager should use. It may already be somewhere else. Then the drawing needs a reference. Perhaps the purchasing policy already has a structure that could work here too. That is something your own group can check. I started with the documents that were available to read.
Large organisations in Norway document a great deal, and often thoroughly: annual reports, sustainability reports, health and safety statements and group policies, with ownership and responsibility described. Most do not need a new system. The governance system already exists.
The question we ask is where policy stops before it becomes procedure and action. Where that happens, follow-up often shifts to the line manager and the individual employee. That can lead to unnecessary processing of health data under GDPR Articles 5, 6 and 9. The revision of ISO 45001 and reporting under ESRS S1 make the question more pressing.
We read the governance system. That is why we start with the documents your group has already published.
I read the policy on the website. It says who is responsible. I could not find a reference to the procedure they should use. It may be in another folder. You may already have sorted it out. So I write a question: which procedure applies, and who owns it? Your team can answer using what you have internally. The answer may confirm that the arrangement is covered. It may also show where the wording needs to be clearer, or where something needs a closer look. That is how an Executive Brief begins. With what can be read, and questions your own people can answer.
Synthetic example
Group X is a synthetic group profile, built from patterns in the reference point of 65 analysed organisations.
The brief is a first, document-based assessment.
The method
01
The sources
Annual reports, sustainability reports, health and safety statements, equality statements, codes of conduct and published group policies. Documents the organisations have published themselves for investors, employees, customers, suppliers and authorities.
02
The reference point
The same reading has been done for 65 organisations with a substantial workforce in Norway, on 20 indicators in four dimensions. The comparison names and ranks no one. The method is set out in the report The Requirement That Turns Inward.
03
The regulations
We read against the Norwegian Working Environment Act sections 3-1 and 4-1, the Internal Control Regulations section 5 and ESRS S1 (own workforce), and follow the ongoing revision of ISO 45001.
04
Data protection
The method is designed to reduce the need to process health data. Uploaded documents are checked for personal data before they are read. The check cannot catch everything, so the sender is responsible for sending only approved governance documents.
The procedure says we should check whether the arrangement works. I start with the shelf. It is nearly empty. That is useful information for whoever refills it. Another form also asks for the time and location of every collection. Combined with a shift roster, that could make someone recognisable. So I ask what the information is for. For refilling, it may be enough to know that the shelf needs more stock. Before choosing a solution, agree what is stored, who can see it, and when it is deleted. The data boundary needs to cover the whole arrangement, including the supplier.
What you receive
Three places to clarify
Three places where the documents stop before anything happens, with a reference to the requirement.
Six questions
Six open questions for the group to settle internally.
The reference point
How the documents compare with the 65 organisations, without ranking.
A possible next step
One suggestion for what could be done first.
We draw no conclusions about internal practice. Your answers to the questions decide whether a further conversation is worthwhile. The choice is yours.
The basis
The report sets out the method, the sample of 65 organisations and the patterns we found. It is open and can be downloaded without an email address.
01
Executive Brief
Free of charge. Built on published sources or documents you choose to send.
02
Policy Scan Enterprise
The whole governance framework, with draft policies and procedures, an evidence register and material for a board paper. Price by agreement.
03
Policy Live
Agreed follow-up that keeps the policy baseline current as law and standards change. Scope and price are agreed.
The procedure now has an owner. We have written down what should happen and when it will be reviewed. I put a date on the drawing. Some time passes. A workplace changes its shifts. The owner moves into a new role. A standard is updated. The drawing needs another look. Policy Scan provides a starting point for further work. Policy Live is the follow-up that keeps the policy baseline current as law and standards change. You agree what that follow-up will cover. Someone in your organisation still needs to assess changes and act on decisions. I leave room for the next date too.
Two short films about arrangements from the handbook: who is responsible on the evening shift, and three questions for a quiet room.
The procedure says products should be available. I have put a shelf in the drawing. Now I need to know who refills it. There is someone responsible during the day. The evening shift starts after that person has gone home. Apparently, the shelf works longer hours than its owner. We add a stand-in and a simple way to report when a refill is needed. Then we check the next shift as well. In a group, the same decision needs to reach each workplace. Choose one arrangement of your own. Who takes responsibility when the usual person is away?
The policy says there is a quiet room. I add it to the drawing and ask three questions. First: who can use it, and on which shifts? That is coverage. Next: is the room being used? You can explore that at a level your organisation has assessed as appropriate. Finally: what gets in the way? Perhaps the key is with a manager who has gone home. That is friction. Now we have something practical to improve. The Arrangement Map brings existing arrangements together through coverage, use and friction. Start with one room, involve the people who work there, and agree when to check again.
Choose which sources the brief should be built on. It is free of charge and commits you to nothing.
Request a brief for your groupOr write to hello@sydera.io.