Which step best ensures governance when a policy you rely on may be outdated?

• A. Post a note on the intranet and wait for feedback.
• B. Document the issue, propose updates, and engage the policy owner for review.
• C. Implement changes without approval.
• D. Ignore the issue.

Answer: (B)

When policy governance relies on a formal change process, the best step is to document what’s out of date, propose specific updates, and involve the policy owner for review. This approach creates a clear, traceable record of the issue and the rationale for changes, assigns accountability to the right person, and brings in the appropriate governance gatekeepers to assess impact, alignment with other policies, and regulatory or risk considerations. Engaging the policy owner ensures subject-matter authority and authorized approval before any changes are made, reducing the chance of misaligned or unauthorized updates.

Posting a note on the intranet and waiting for feedback is too passive and lacks formal approval or a clear path to resolution. Implementing changes without approval bypasses governance controls and can introduce compliance or risk problems. Ignoring the issue leaves the organization exposed to outdated guidance and potential adverse consequences.