Creating a New Policy

Last updated: March 25, 2026

Only custom policies can be created from scratch. Default policies come pre-configured with your organization's account.

To create a new policy:

  1. Go to Policies.

  2. Select + Add policy.

  3. In the Add custom policy panel, fill in the required fields:

    1. Enter a Policy name.

    2. Add a Description that explains what the policy covers. This description helps the Mycroft assistant generate relevant content.

  4. Under Employee acceptance, choose how employees should acknowledge the policy:

    1. All employees: Every employee must acknowledge this policy.

    2. Select employees: You choose specific employees this policy applies to.

    3. No acceptance: No employee acknowledgment is required.

  5. Under Policy owners, assign at least one of the following:

    1. General or business owner

    2. Security owner

  6. (Optional) Check Require Reviewers if reviewers must approve the draft before it can be published. When enabled, all assigned reviewers must sign off before Save & publish becomes active.

  7. Leave Link to ERM-8: Policies Sign-off Control checked (recommended) to automatically track this policy's publication and approvals in the ERM-8 control.

  8. Select Add policy.

Once created, the policy detail page opens in a Not started state with no content. Mycroft presents three options under Select a method:

  • Start from scratch: Mycroft uses your policy name and description to generate an initial draft across the policy sections. Review and adjust this content before publishing.

  • Import & edit: Upload an existing policy document, pull it into the structured editor, and adjust the content as needed.

  • Upload original: Upload a finalized policy to store as-is. Mycroft keeps this version unchanged and displays it as a read-only file.

Select the option that best fits what you have, then follow the prompts to create your first version.

Note: Default policies come pre-configured with structure and content generated by Mycroft. To edit one, open it from the Policies list and create a new draft version.