Which role has the capability to create Policies?

Which role has the capability to create Policies?

• A. Risk Manager
• B. Compliance Manager
• C. Compliance admin
• D. Compliance User

Answer: (B)

Creating policies is a governance task handled by the role that oversees compliance program development. The Compliance Manager has the permissions to author, edit, and publish policies, connect them to controls and risks, and manage their lifecycle. This role is responsible for defining how the organization meets regulatory requirements and internal standards, which is why it’s the one best suited to create policies. A Risk Manager focuses on identifying and assessing risk, not drafting policy documents; a Compliance Admin handles configuration and ongoing administration of the app, not policy creation as a primary function; a Compliance User typically has permissions limited to executing tasks rather than creating new policy content.

Creating policies is a governance task handled by the role that oversees compliance program development. The Compliance Manager has the permissions to author, edit, and publish policies, connect them to controls and risks, and manage their lifecycle. This role is responsible for defining how the organization meets regulatory requirements and internal standards, which is why it’s the one best suited to create policies. A Risk Manager focuses on identifying and assessing risk, not drafting policy documents; a Compliance Admin handles configuration and ongoing administration of the app, not policy creation as a primary function; a Compliance User typically has permissions limited to executing tasks rather than creating new policy content.