How do I create and approve policies in AffirmReady?
KB-076 | Applies to: All plans | Last reviewed: November 7, 2026 | Version 1.1
Short written policies help support several Level 1 requirements at once. AffirmReady gives you templates to start from. Your company edits them to match how your shop really works, and an Owner approves them.
The short answer
An Owner or Editor starts a policy from a template on the Policies page, edits it, and saves it as a draft. An Owner reads it and clicks Approve this version. Every earlier version is kept, and anyone on your team can print a policy or save it as a PDF.
The templates
- Acceptable Use Policy
- Access Control Policy
- Information Security Policy
- Media Disposal Policy
- Physical Access and Visitor Policy
Once you start a policy from a template, that template leaves the list. Open your policy under Your policies instead.
Starting a policy
The How to finish a policy box at the top of the Policies page sums up the steps.
- Select Policies in the menu.
- Under Start a policy from a template, choose a Template.
- If the template asks for them, enter the Policy owner (the person responsible for it, for example your office manager) and the Effective date. Your company name fills in from your account.
- Click Create a draft. Your draft opens.
Making it yours
Each policy's page starts with a How to use this page box. Change the wording right there in the Policy text box so it describes what your company actually does. Take out anything that doesn't fit and add anything that's missing. Then click Save as a new draft.
Each save creates a new version. Earlier versions stay under Version history at the bottom of the page. Policies are plain text, up to 20,000 characters.
Approving a policy
Only an Owner can approve.
- Read the draft. Owners see a Before you approve note with points to check, right under the Policy text box.
- Click Approve this version and confirm. If you made changes, save them first.
The policy then shows Approved, with the date and who approved it. If anyone changes an approved policy later, the change becomes a new draft for an Owner to approve again. Editors see a reminder to ask an Owner when a draft is ready.
What the statuses mean
- Draft: saved but not approved yet.
- Approved: an Owner approved this version.
- Needs review: carried forward from last year. Read it through, update anything that has changed, and an Owner approves it again.
Who can see and change policies
Everyone on your team can read your policies. Owners and Editors can edit them, and only Owners can approve them. Read-only members can look but not change anything.
Getting a copy
To print a policy or keep a PDF copy, open it and click Print or save as PDF. To make a PDF, choose Save as PDF in the print window. The printout shows the policy's title, status, version and saved text, without the app's menus and buttons. If you have changes in the Policy text box that aren't saved yet, the button waits until you save them, so the printout matches what's saved. Everyone on your team, including Read-only members, can print a policy.
An Owner's data export includes every version of every policy, and the PDF report includes your policies too. See KB-056.
Your policies are your own
AffirmReady helps you prepare your policies. Your company decides what they say and approves them. A written policy supports your self-assessment, but your everyday practice has to match what it says.
Still need help?
Email support@affirmready.com and include your company name and the email address on your AffirmReady account. Our team is available Monday through Friday, 8:00 AM to 5:00 PM Eastern, and replies within one business day.
For CMMC Level 1 readiness purposes only. Not legal advice. Your company is responsible for the accuracy of its self-assessment and affirmation.