Skip to main content

Add the ability to rename policy names

We’d like to be able to rename the policies in the Policies page.

During certification and surveillance audits, the auditor traces each control from the Statement of Applicability, risk treatment plan and prior audit reports to the governing document by its title, and then verifies identification, version control and approval under ISO/IEC 27001 clause 7.5. The renaming of our policies and management system in Secfix means the titles in our controlled documentation no longer match what the auditor sees in the platform. This forces us to demonstrate, during the audit, that the renamed document is the same approved artefact, that its approval and version history remain valid, and that staff acknowledgements against the original title still hold. That is an avoidable audit finding risk on document control, and it also breaks the evidence trail for our concurrent SOC 2 observation period. We need the platform to display our approved document titles, or at minimum a customer-defined display name alongside your framework mapping, so that what the auditor sees in Secfix is consistent with our documented information.

1 comment

Log in to comment and vote

Comments1

  • Jana

    •

    Oct 22

    We’d like to be able to rename the custom policies.

    We’re unable to edit the custom policy names, and the only workaround is to create a new custom policy with the updated name. This would start the approval process from scratch, and we don't want the date of these policies to show as October in the system when we already approved these in September.