Policy review and update
Policies written years ago, or inherited, read against the current text of the rules they name and returned marked up in five working days.
$350 to $500 per document reviewed, fixed before we start. Returned in 5 working days.
Updated
PD-REV; specimen page; changes marked
Change note
Contents
- 1Currency
- 2Consistency
- 3Completeness
- 4Clarity
3Access control
3.1Access to systems is granted on the basis of role, as deleted text: ISO/IEC 27001:2013 controls A.9.1.1 and A.9.2.3 inserted text: ISO/IEC 27001:2022 Annex A controls 5.15 and 8.2 (end of change) require, and reviewed when a person's role changes.
What it is
Policy review and update is a check of an existing policy against the current text of the rules it names and the facts it states, returned as a marked-up copy, a revised version with every change tracked and a change note saying what moved and why.
Who it is for
A company with policies that were written once and never read again, a firm whose auditor has flagged a document that cites a rule by its old name, a team that inherited a folder of documents from a previous manager, or a business preparing for a certification visit and unsure which of its policies still describe what it does. The request usually comes when policies someone else wrote are about to be read by a customer or an auditor, and nobody is sure they still describe what the business does. The service is priced per document, so you can send one policy or the whole folder.
What you get
3 deliverables, in Word (.docx) and PDF, with one round of revisions.
- Marked-up copy of each document
- Revised version with the changes tracked, a document ID and a revision block
- Change note listing what moved and why
What a review checks
Each document is read against four questions, and every finding is marked on the document and explained in the change note.
| Check | What we look for |
|---|---|
| Currency | Does the document cite the rule by its current name and number, and does each clause still say what the rule says today? |
| Consistency | Does it contradict another document in the set, the handbook or the procedure it sits beside? |
| Completeness | Does it have an owner, an approval date, a review date, a scope and the record each step should produce? |
| Clarity | Can the person who has to follow it find the step that applies to them and act on it without asking? |
The first check looks for a rule that has been renumbered, replaced or repealed while the document still cites the old version. Where it finds one, the change note names the current text and the clause that moved.
What it costs
$350to $500per document reviewed
A policy review is $350 to $500 per document reviewed. The quote is fixed before we start and does not change. Maintenance is a separate plan, $29 to $99 a month, that keeps each reviewed document current when a rule it names changes.
How the document is made, from intake to delivery, is set out in how it works.
- Band
- Single policy
- Returned
- 5 working days
- Revisions
- One round included
- Review
- Our legal team, before delivery
- Format
- Word (.docx) and PDF
- Maintenance
- $29 to $99 a month
What we need from you
The intake asks which documents you want reviewed, which rules or standards each one is meant to answer, when it was last approved and by whom, what has changed in the business since, and whether you have a house style or template the revised version should follow. Send the documents once we reply, in Word where you have them; PDF is fine, and we rebuild the document in Word if there is no source. Where a document does not say which rule it answers, the intake asks you to name one.
How each document is read and reviewed
We read each document against the current text of the rules it names, against the other documents in the set so they do not contradict each other, and against your house style. Our legal team reviews the marked-up copy and the revised version before they reach you, and the review is recorded in the revision block we add to the document. You then read it, mark what you want changed, and we revise once. Each document comes back in Word and PDF with the changes tracked, a change note, a document ID and a revision block, and the final version is filed with us for the maintenance plan.
Read against
- The rules each document names, read against their current text and numbering
- ISO 9001:2015 clauses 7.5.2 and 7.5.3 (documented information; the 2015 text, since replaced by ISO 9001:2026), for the identification, approval and version-control checks
- Your house style and the brand's document conventions
What maintenance covers
When the rule changes, your document changes. Under the maintenance plan the reviewed document joins the set we track, we issue a revised version with the changes marked, and we keep the document ID and revision history current. Without the plan, the document is still yours to use and to edit; it simply stops being tracked, and a later review is quoted again per document.
$29to $99a month, optional
Questions about a policy review
- Can PolicyDrafters review policies it did not write?
- Yes, policy review and update is built for policies someone else wrote, including ones written years ago. Each document is read against the current text of the rules it names, and the change note says what moved and why.
- What if a policy needs rewriting rather than revising?
- If a policy review finds that a document needs rewriting rather than revising, the change note says so and the rewrite is quoted as a new document before any more work is done. The review fee covers the review; you decide whether to go further.
- Does a policy review cover contracts?
- No, a policy review covers policies, procedures, handbooks, manuals and notices, not contracts. Contracts and terms are out of scope, and we tell you at intake if a document falls outside it.
- How long does a policy review take?
- A policy review takes five working days from a complete intake to the marked-up copy and the revised version. Larger folders are scheduled in batches, and the quote says when each batch arrives.
- How much does a policy review cost?
- A policy review is $350 to $500 per document reviewed, in the single policy band. The quote is fixed per document before we start and does not change, and one round of revisions is included.
Guides that go deeper
How often should company policies be reviewed, and by whom?
Annually by convention, and whenever the rule or the facts change, after an incident or an audit finding. Who reviews, who re-approves, and how the review is recorded.
Updated
How much does it cost to have an employee handbook written?
Templates cost least, legal practices most. A drafted handbook is priced by jurisdictions, headcount, existing documents and extra policies, then quoted as one figure.
Updated
A customer sent us a security questionnaire. What do we do next?
Read it whole, give each section an owner, and answer with the control you run and the evidence you hold. A documented gap with a date and a plan is a normal answer.
Published
Who can help write or review our SaaS security policies?
Your own team, a template, an AI draft, a consultant, a virtual CISO, a platform, a law practice or a drafting firm: what each route gives you and what stays with you.
Published