How to archive a policy

This article explains how to archive a policy in the Policies list of the testing program. Archive a policy when a governing document has been retired or superseded and should no longer count toward your active program, while still being kept on file for your records.

Before you start

Archiving is available only for policies that are currently active — once a policy has already been archived, its actions menu no longer offers this (or any other editing) option. Archiving also removes any risks, controls, and tests from your program that only that policy held, so it's worth confirming nothing else depends on it before proceeding.

Steps

1. Open the Policies list. This shows every governing document for the entity, one row per policy.
2. Open the actions menu for the policy you want to archive. Click the icon at the right end of the policy's row to open its actions menu, then select Archive near the bottom of the list.

3. Review the confirmation dialog. A dialog titled "Archive policy" asks you to confirm, and notes that any risks, controls, and tests that no other policy holds will be archived along with it.

4. Confirm by clicking "Archive." This finalizes the action — a confirmation message appears noting that the policy, along with any risks, controls, and tests only it held, has been archived.

What happens next

The archived policy no longer appears in the default policies list. To view it again, open the policy filters and turn on "Show archived policies only" — this swaps the list to show archived policies in place of active ones, rather than adding them alongside. From there you can still open the archived policy to review it, but its actions menu will only offer that option; renaming, editing entities, uploading new versions, and re-analyzing are no longer available once a policy is archived.