Policy identity and scope,Owner and approver,Requirements and source changes,Operational responsibilities,Communication and training,Exceptions and effectiveness,"Approval, actions and next review" ,,,,,,