1 Understanding the Document Pyramid

Compliance and Risk Management for Technical Professionals · 4:24

Listen on 93

Lyrics

[Verse 1]
In the world of governance there's a structure you should know
Five layers stack together making sure that processes flow
At the top sit policies with the what and why so clear
Senior leadership defines them year after year

[Chorus]
Pyramid of documents reaching to the sky
Policies and standards tell us what and why
Procedures show us how to do it right
Guidelines give us options baselines set the sight
From the top down flowing specific as we go
Framework structure helping every process grow

[Verse 2]
Standards come beneath them with the how well defined
Measurable requirements keeping goals aligned
If policy says encryption then the standard states the way
AES two fifty six with keys managed every day

[Chorus]
Pyramid of documents reaching to the sky
Policies and standards tell us what and why
Procedures show us how to do it right
Guidelines give us options baselines set the sight
From the top down flowing specific as we go
Framework structure helping every process grow

[Verse 3]
Procedures are the playbook with each step laid out clear
They tell us how and who should act when deadlines drawing near
Guidelines offer wisdom when you need some flexibility
While baselines set configurations for stability

[Bridge]
Policies change slowly they're built to last for years
Standards bridge the gap between the vision and the gears
Procedures adapt quickly as the tools and methods change
Guidelines give you options when the rigid feels too strange

[Chorus]
Pyramid of documents reaching to the sky
Policies and standards tell us what and why
Procedures show us how to do it right
Guidelines give us options baselines set the sight
From the top down flowing specific as we go
Framework structure helping every process grow

[Outro]
Five layers working together in perfect harmony
Building strong foundations for your organization's destiny

2 Referencing Controls Across the Hierarchy →