Governance document analysis for groups
Governance document analysis reads an organisation's governance documents as one system. Policy Scan Enterprise reads them with reference to Norwegian working environment law, the Internal Control Regulations, GDPR Article 9, ESRS S1 and ISO 45010:2026, and shows where the documents connect and where they stop before anything happens. The readers are the executive team, the HR director and the data protection officer.
Why start with the governance document
Compliance work often starts with individual cases. The governance document comes first: if it does not say what should happen, each case has to be solved on its own. Reading the documents shows what has been decided, who owns it and how it is triggered, before any individual case arises.
What the analysis gives you
Every place to look in the governance documents, in one overview, with editable drafts of policies and procedures, an evidence register and material for a board paper. The work starts with an Executive Brief, free of charge, based on the documents the group has already published.
Alongside the systems you already have
The analysis is built to be used alongside existing OHS and compliance systems. Each finding can be checked against the text it concerns.
Privacy and limits
The analysis reads governance documents and is designed to reduce the need to process sensitive health information. It does not use employee surveys or information about individuals.
The guide is open online and as a PDF. The Executive Brief is built only on published sources.
Frequently asked questions
- Who is the analysis built for?
- Groups and large organisations with their own OHS system and a data protection officer. The readers are typically the HR director, the compliance lead and the executive team.
- How often should the analysis be repeated?
- Whenever the governance documents change materially, and otherwise once a year as part of the management review of the OHS system. A reading before and after a major revision shows what has changed in the text.
- How is this different from a GDPR compliance review?
- A GDPR compliance review looks at how personal data is processed in operation. The governance document analysis looks at the text that steers operation: whether it leads to health information being collected, or whether the arrangements work without it.