Your risk management program needs a well-written standard to manage the degree to which the organization complies with a specific policy. Standards documentation is meant to be very detailed and owned entirely by the people complying with the policy. Changes do not require a complex change management process — it’s up to the team complying with the policy to determine their standards. This is not executive management’s time to shine; it’s all about the first line determining their fate. This report includes templates to jump-start the creation of your risk management standards documentation.