HR-22 – Organizational Strategy

What is HR-22—Organizational Strategy Control?

HR-22 Organizational strategy control ensures that the organization has documented a strategy and a roadmap for future success. Having goals and a carefully thought-out strategy provides a map for the organization’s employees to follow.

Typically, the organizational strategy includes the missions, goals, action plan, and timeline for achieving the goals.

In this control, your auditor wants to see your latest strategy or your goals.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

• Externally sourced strategy templates from ConceptBoard

Control implementation

To implement this control,

A formal strategy document must be documented. This formal document must be communicated to and shared with the entire company.

Lastly, the document must be updated at least annually.

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1.  Your latest strategy or organization’s goals

Evidence example

For the suggested action, an example is provided below:

1. Your latest strategy or organization’s goals
   The following screenshot shows an example from TrustCloud (only a few screenshots are provided here). (For your audit, provide the entire document.)