Policy and Compliance Officer

Profile title	Policy and Compliance Officer
Summary statement	Provides and maintains compliance to (new) laws, codes, standards and regulations concerning the data centre to maintain the reputation and integrity of the data centre business.
Mission/general skills description	Ensure the data centre is compliant with applicable governmental codes and selected standards and codes of practice, adopts and follows national, international and industry codes and standards. For example, with regards to fire prevention and suppression – this requires both local code conformances and alignment with international practices. Practical knowledge of common compliance standards such as the Sarbanes-Oxley Act, PCI etc.
Deliverables	Accountable	Responsible	Contributor
	Compliancy policy	Compliancy risk analyses Reputation and integrity	Legal Risk Management
Main task/s	Determine which regulations and standards applies to the data centre Appoint auditors and manage the audit process Identify obligations with high impact on business operations Impact analysis and prioritization; controlling high priority obligations (direct action) Supporting management in making and implementing policies Create awareness about the new policy within the organization Monitors compliance and certifications Prevent conflicts with commercial objectives Ensure that objectives can be achieved within frameworks of compliance (e.g. law, standards, etc.) Ensure policies, standards and procedures are in compliance with applicable local, state and federal laws and regulations and third-party guidelines
DC-Competence (From DCCF^©)	A.5. Site Planning		Level 4
	C.1. Service Delivery		Level 3
	E.3. Risk Management		Level 3
	E.11. Governance		Level 5
KPI area	Protect the reputation and the integrity of the data centre
EPI-DC Framework^© Disciplines	Governance & Management Administration Organization Security Management
EPI courses	Required; CDRP Added value; DCFC/CDCP CITM