Policies

Policies are the parts of the handbook that are binding rather than descriptive. They are written formally and precisely on purpose, and each names an owner and a review date.

Three groups

Work environment. Leave, holiday, remote working, desk and screen security, health and safety, the disciplinary procedure, and amarti’s Modern Slavery and Human Trafficking Statement.

Data and information security. How amarti protects information: anti-bribery and corruption, privacy and cookies, information security, access control, information transfer, email, mobile devices, incident management, the use of AI, and the security summary we give to clients.

Operational and ethical standards. Equipment disposal and reuse, supplier relationships and supplier diversity, sustainability, the fair treatment of vulnerable customers, customer complaints, risk escalation, how we run engagements, and business continuity.

Two governance documents sit above the groups: the Policy Governance Framework, which sets out how policies are created, approved, reviewed and retired, and the Policy and Standards Register, the authoritative list of what is in force.

If you are unsure which group a question belongs to, ask rather than guess. A policy question answered from memory is how a rule quietly stops being followed.

Where these come from

The master copy of every policy is the approved document held in the company management system and indexed by the Policy and Standards Register (AM-REG-001). Each page here reproduces that document and opens with its document control table: reference, version, classification, owner, approval date and next review date. If a page and the approved document ever disagree, the approved document is correct and the page needs fixing.

Review

Each policy names an owner and a review date. A policy that is past its review date is still in force, but flag it so it gets looked at.