Systems and methods for policy management
Systems and methods for policy management are described. In some implementations, a master policy management system can create a policy template in which all policies of a user can be built, monitored, and enforced. The master policy management system can create a taxonomy for the policy template and receive access and control settings for the policy template from the user. A user can generate policies in the policy template and the master policy management system can review and certify the policies based the accuracy of the policies. Once a policy is built, the master policy management system can review and certify the policy, provide a quality score for the policy, perform lifecycle management, record the policy use, and report alerts regarding the policy.
1. A computing system comprising:
one or more processors; and
one or more memories storing instructions that, when executed by the one or more processors, cause the computing system to perform a process comprising:
creating a taxonomy for a policy template for generating and enforcing policies;
receiving user type access and control settings for the policy template;
attaching metadata tags to the policy template based on a type of data or description of an action in a user policy;
generating the policy template for receiving and enforcing policies;
generating a policy in the policy template in a first language of a client;
translating the policy into a second language of a policy management system for enforcement and certification of the policy, wherein the first language of the client is different from the second language of the policy management system; and
determining a quality score for the policy based on a combination of respective scores assigned to two or more of: a policy context, at least one policy rule or a policy revision status.
2. The computing system of claim 1 , wherein an enforcement ruleset defines data tagging and transformation for the policy.
3. The computing system of claim 1 , wherein the process further comprises:
scoring the policy based on policy use by a user during a time threshold.
4. The computing system of claim 1 , wherein the metadata tags indicate personally identifiable information.
5. The computing system of claim 1 , wherein the process further comprises:
monitoring the enforcement of the translated policy.
6. The computing system of claim 1 , wherein the process further comprises:
certifying the policy based on comparing the translated policy to policies in a master policy database.
7. The computing system of claim 1 , wherein the taxonomy is region specific.
8. A method comprising:
creating a taxonomy for a policy template for generating and enforcing policies;
receiving user type access and control settings for the policy template;
attaching metadata tags to the policy template based on a type of data or description of an action in a user policy;
generating the policy template for receiving and enforcing policies;
generating a policy in the policy template in a first language of a client;
translating the policy into a second language of a policy management system for enforcement and certification of the policy, wherein the first language of the client is different from the second language of the policy management system; and
determining a quality score for the policy based on a combination of respective scores assigned to two or more of: a policy context, at least one policy rule, or a policy revision status.
9. The method of claim 8 , wherein an enforcement ruleset defines data tagging and transformation for the policy.
10. The method of claim 8 , further comprises:
scoring the policy based on policy use by a user during a time threshold.
11. The method of claim 8 , wherein the metadata tags indicate personally identifiable information.
12. The method of claim 8 , further comprises:
monitoring the enforcement of the translated policy.
13. The method of claim 8 , further comprises:
certifying the policy based on comparing the translated policy to policies in a master policy database.
14. The method of claim 8 , wherein the taxonomy is region specific.
15. A non-transitory computer-readable storage medium including a set of instructions that, when executed by one or more processors, causes the one or more processors to perform operations comprising:
creating a taxonomy for a policy template for generating and enforcing policies;
receiving user type access and control settings for the policy template;
attaching metadata tags to the policy template based on a type of data or description of an action in a user policy;
generating the policy template for receiving and enforcing policies;
generating a policy in the policy template in a first language of a client;
translating the policy into a second language of a policy management system for enforcement and certification of the policy, wherein the first language of the client is different from the second language of the policy management system; and
determining a quality score for the policy based on a combination of respective scores assigned to two or more of: a policy context, at least one policy rule, or a policy revision status.
16. The non-transitory computer-readable storage medium of claim 15 , wherein an enforcement ruleset defines data tagging and transformation for the policy.
17. The non-transitory computer-readable storage medium of claim 15 , wherein the operations further comprise:
scoring the policy based on policy use by a user during a time threshold.
18. The non-transitory computer-readable storage medium of claim 15 , wherein the metadata tags indicate personally identifiable information.
19. The non-transitory computer-readable storage medium of claim 15 , wherein the operations further comprise:
monitoring the enforcement of the translated policy.
20. The non-transitory computer-readable storage medium of claim 15 , wherein the operations further comprise:
certifying the policy based on comparing the translated policy to policies in a master policy database.