What is the function of the sn_compliance_policy table?

• A. Stores regulatory citations
• B. Stores policy statements
• C. Stores policy data such as policy content
• D. Stores risk scores

Answer: (C)

The function of this table is to hold the actual policy content that defines compliance requirements. It serves as the repository for policy data—the text of the policy, its title, scope, version, and status—so policy statements can be read, reviewed, and enforced within IRM. This content is the core artifact you manage in policy governance, and it’s what users refer to when applying controls and ensuring adherence to regulations.

Regulatory citations are stored elsewhere as references to the standards or laws the policy relates to, not the policy text itself. Risk scores are part of risk assessments and measurement, not the policy document. For example, a policy stating that “All employees must enable MFA” would be stored as policy content in this table, with related links to the appropriate regulations and controls, but the policy’s actual text is the primary data held here.