What makes a good company policy

I believe the best policies, whether information security or flexible work arrangements:

• Are a genuinely useful reference
• Are written in plain language (e.g. speak truth without jargon, clichés, or obscurity)
• Reflect actual practice and give clarifying advice
• Have just enough bones
• Can be used to support having conversations with customers and colleagues
• Are updated when leanings are made, or circumstances change
• Have a change log

Over time the best policies become the “thing” that everyone “knows”.

Written by Tate Johnson on 31 May 2025. Subscribe to my blog's RSS feed.