# [Policy name] Policy

> Corporate policy document: purpose, scope, numbered policy statements,
> roles and responsibilities, compliance and exceptions, enforcement,
> related documents, definitions, review cycle and approval. Based on
> common corporate governance practice. Replace every `[bracketed]` value
> and every row marked *Example*. This is a document format, not legal
> advice: have the final policy reviewed by legal counsel and HR where it
> affects employment terms.

<!--
Guidance: How to use this template
- A policy says WHAT must happen and WHO is accountable. Put HOW in
  procedures, standards or guidelines and link them in section 8.
- Write statements with "must" for mandatory rules and "should" for
  expected practice. Avoid "may" unless granting a permission.
- Keep each statement testable: an auditor should be able to check
  whether it is being followed.
- Short policies get read. If the draft exceeds four pages, move detail
  into supporting procedures.
-->

| Field | Value |
|---|---|
| Policy ID | [POL-NNN] |
| Policy name | [Policy name] |
| Version | [1.0] |
| Status | [Draft / Approved / Effective / Retired] |
| Policy owner | [Role, @name] |
| Approving body | [Board / Executive committee / Chief executive] |
| Effective date | YYYY-MM-DD |
| Next review | YYYY-MM-DD |
| Applies to | [All employees, contractors and subsidiaries] |
| Classification | [Internal / Public] |

## 1. Purpose

<!-- Guidance: Two or three sentences on why the policy exists: the risk it controls, the obligation it meets, or the behaviour it sets. -->

This policy sets out [organisation]'s rules for [subject] in order to
[protect, comply, ensure]. It supports [strategic objective or legal
obligation, named by title].

*Example:* "This policy sets the rules for giving and receiving gifts and
hospitality, so that business decisions are never influenced, or seen
to be influenced, by personal benefit, and so that the company meets its
anti-bribery obligations."

## 2. Scope

<!-- Guidance: Who and what the policy covers, and any explicit exclusions. Mention contractors, subsidiaries and geography. -->

- **People**: [employees, directors, contractors, temporary staff, agents acting for the company]
- **Activities**: [transactions, systems or situations covered]
- **Locations and entities**: [all subsidiaries, with local addenda where law differs]
- **Exclusions**: [what is out of scope and which document covers it]

## 3. Policy statements

<!-- Guidance: Number every statement so it can be referenced in audits and exception requests. Group them under short headings. -->

### 3.1 [Theme 1, for example Giving gifts]

1. Employees must not offer or give anything of value intended to
   influence a business decision.
2. *Example:* Gifts to a third party with a value above [amount] must be
   approved in advance by the employee's line manager and recorded in
   the gifts register.
3. [Statement]

### 3.2 [Theme 2, for example Receiving gifts and hospitality]

4. *Example:* Employees must decline cash or cash equivalents of any
   value.
5. *Example:* Hospitality above [amount] per person must be recorded in
   the register within [5 working days].
6. [Statement]

### 3.3 [Theme 3, for example Public officials]

7. *Example:* Nothing of value may be offered to a public official
   without prior written approval from the compliance officer.
8. [Statement]

## 4. Roles and responsibilities

<!-- Guidance: Name roles, not people. Every role listed must have at least one concrete duty. -->

| Role | Responsibilities |
|---|---|
| Board / approving body | Approves the policy and receives annual compliance reports |
| Policy owner | Maintains the policy, interprets it, reports on compliance, leads reviews |
| Managers | Make sure their teams understand and follow the policy; approve requests within their authority |
| All in scope | Read, understand and follow the policy; report suspected breaches |
| Compliance / internal audit | Monitors adherence, tests controls, investigates breaches |

## 5. Compliance, monitoring and exceptions

<!-- Guidance: Explain how compliance is checked and how someone can request an exception. Exceptions must be time-limited and recorded. -->

### 5.1 Monitoring

Compliance is monitored through [register reviews, audits, attestations,
system reports]. The policy owner reports results to [body] every
[period].

### 5.2 Exceptions

An exception to any statement in section 3 must be requested in writing
using [form or system], state the statement number, the reason, the
risk and compensating controls, and be approved by [role] before it
takes effect. Exceptions expire after [12 months] unless renewed.

| Exception ID | Statement | Reason | Approved by | Expires |
|---|---|---|---|---|
| *Example:* EX-2026-003 | 3.2 item 5 | Industry conference with bundled hospitality | Compliance officer | YYYY-MM-DD |

### 5.3 Reporting concerns

Suspected breaches must be reported to [line manager, compliance,
speak-up channel]. Reports made in good faith are protected from
retaliation under [whistleblowing policy reference].

## 6. Enforcement

<!-- Guidance: State the consequences of breach in proportion and by reference to the disciplinary procedure. Do not invent penalties outside HR policy. -->

Breaches of this policy may lead to disciplinary action under
[disciplinary procedure reference], up to and including termination of
employment or contract. Where a breach may also be unlawful, the matter
may be referred to the relevant authorities. Managers who knowingly
allow a breach may also be subject to disciplinary action.

## 7. Definitions

<!-- Guidance: Define terms the policy uses in a specific sense. Keep definitions short and consistent with related policies. -->

| Term | Definition |
|---|---|
| *Example:* Gift | Any item, service or benefit given without charge or below market value |
| *Example:* Hospitality | Meals, entertainment, travel or accommodation provided by or to a third party |
| *Example:* Public official | Any person holding a legislative, administrative or judicial office, or acting for a public body or state-owned enterprise |
| [Term] | [Definition] |

## 8. Related documents

<!-- Guidance: Link procedures, standards, forms and laws that implement or inform this policy. -->

| Document | ID | Relationship |
|---|---|---|
| [Gifts and hospitality procedure] | [PRC-NNN] | How to record and approve |
| [Code of conduct] | [POL-NNN] | Parent principles |
| [Whistleblowing policy] | [POL-NNN] | Reporting channel and protection |
| [Applicable law or regulation] | [Reference] | Legal basis |

## 9. Review cycle

<!-- Guidance: Set a fixed review interval and the events that trigger an early review. -->

This policy is reviewed every [12 / 24 months] by the policy owner, and
earlier after a significant change in law, a major breach, an audit
finding or an organisational change. Minor wording changes may be
approved by the policy owner; changes to policy statements require
approval by [approving body].

## 10. Approval and version history

<!-- Guidance: Record formal approval and every change, so readers know which version applied on a given date. -->

| Version | Date | Change summary | Approved by |
|---|---|---|---|
| 1.0 | YYYY-MM-DD | First approved version | [Approving body] |
| [N.N] | YYYY-MM-DD | [Change summary] | [Approver] |

Acknowledgement: all staff in scope confirm they have read this policy
through [learning system or attestation] within [30 days] of joining and
after each major revision.

## Standard and licence note

Based on common corporate governance practice for policy documents and
policy management. This template is original text written for this
collection. It is a document format, not legal advice; obtain review by
qualified counsel for your jurisdiction. Template licence: MIT.