Policies can be automatically published after which of the following occurs?

• A. Policy is approved by all approvers
• B. Related control objectives are marked active
• C. Policy is approved by one approver
• D. Policy exception is closed

Answer: (A)

Automatic publishing happens when all required approvers have approved the policy. In IRM, policies often go through a multi-approval workflow, and the system only auto-publishes once every designated signer has given their sign-off. This ensures the policy isn’t published until every stakeholder with governance responsibility has reviewed it.

Related control objectives being marked active doesn't trigger publishing; that action affects controls status, not the policy’s publication. If only one approver approves, publishing won’t occur because the workflow requires all required approvals. Closing a policy exception is about the handling of exceptions, not about publishing the policy itself.