{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":17821,"path":"governance-risk-compliance/policy-and-compliance-management/policy-compliance-mandatory-setup.md","title":"Policy and Compliance Management mandatory setup","bundle":null,"doc_type":null,"release":"australia","body":"\n# Policy and Compliance Management mandatory setup\n\nAfter you have assigned roles to your users and set Policy and Compliance Management properties, proceed with the mandatory setup steps.\n\nThe flow of mandatory steps in the checklist are illustrated here.\n\n\\[Omitted image \"mandatory-steps.png\"\\] Alt text: Mandatory steps\n\nWhen you have completed the mandatory steps outlined above, other [optional setup procedures](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/policy-compliance-optional-steps.md) are available.\n\n-   **[Create a policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/t_DefineAPolicy.md)**  \nA policy defines an internal practice that processes must follow. Policies are defined as policies, procedures, standards, plans, checklists, frameworks, and templates.\n-   **[Create a control objective](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/t_CreateAPolicyStatement.md)**  \nA control objective is an objective, direction, or standard that acts as guidance for company interactions and operations. Control objectives can be categorized, classified, and related to policies.\n-   **[Relate a control objective to a policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/t_RelatePolicyStateToPolicy.md)**  \nAssociate the control objective to a policy individually when the policy is in the review or draft state by clicking the edit button in the Control Objective related list.\n-   **[Create a control attestation using the Attestation Designer](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/c_Attestations.md)**  \nUse the Attestation Designer to create and edit metric types. Use different metric types for different controls. Select multiple respondents for an attestation, as well as change scoring parameters.\n-   **[Create a control indicator](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/manage-indicators-policy-comp.md)**  \nIndicator data for controls, risk, and audit evidence are measured differently depending on the GRC application.\n\n**Parent Topic:**[Implementing Policy and Compliance Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/policy-compliance-impl-overview.md)\n\n"}}