Secoda logo

RuleSafe

RuleSafe™ is a third-generation policy awareness system that helps organisations achieve improved levels of compliance and risk management via intranet technology.

It embodies a three-stage approach to compliance:

1. Define your policies

  • Built-in editors and simple-to-use wizards help you write or import policies, procedures and guidance, and link these to staff roles, keywords, business processes and user-defined criteria.
  • Change management ensures only authorised policies are published.
  • The 'Statement of Applicability' feature records which external regulations and standards are relevant to your organisation.
  • Detailed mappings between internal policies and external standards & regulations give you clear visibility of any gaps or overlaps in your organisation's policies.
  • Accelerate policy development with add-on Knowledge Modules.
  • Access controls allow policy owners, authors, reviewers and auditors to collaborate whilst maintaining separation between their roles.

2. Achieve awareness

  • Employees can easily find, read and 'accept' policies using a web browser: no desktop software installation required.
  • Policies in RuleSafe are highly structured, so that staff can easily find and understand the information that is relevant to them, their role and their current work.
  • New or changed information can be highlighted.
  • Role-specific guidance aids understanding.
  • Cross-references to board-level objectives and regulatory requirements emphasise the need for compliance.
  • No two organisations are exactly alike, so RuleSafe adapts its appearance and terminology to suit your corporate culture.
  • If employee acceptance of policies is a requirement, then RuleSafe provides a variety of 'click to accept' options; including requiring users to provide a justification if they decline to accept policies.

3. Prove compliance

  • Report on who has (or has not) signed up to specific policies, and when.
  • Users can raise feedback, queries or requests, for example to request changes to policy or report an area of non-compliance.
  • Distribute any policy report by email.
  • Generate a scorecard showing how well each part of the organisation complies with each policy, based on local reviews or audits.