Question 1

Which standards require a compliance policy?

Accepted Answer

None of the eight regimes quoted here requires it by clause; it is recognised because a policy set often carries it, and the regimes that do require it are named on the page and not quoted.

Question 2

What is a compliance policy for?

Accepted Answer

How the organisation identifies its obligations, assigns them, checks them and reports breaches of them, across every regime it answers to.

Question 3

Who should own the compliance policy?

Accepted Answer

The clauses imply legal or the compliance officer. The register names the role so the line on your list can carry a name.

Question 4

How often should a compliance policy be reviewed?

Accepted Answer

Annual (the register's default: the clauses say planned intervals and on significant change, and do not fix a period).

Question 5

Is there a template for a compliance policy?

Accepted Answer

Yes: https://compliance.theartofservice.com/policy-templates/compliance-risk-management-policy

Also called	compliance framework, compliance manual
Family	Governance and the management system
Document type	Policy. The regimes ask for the content, not the label; a line pasted as a standard, procedure, plan or schedule is placed here with the label noted.
Folds into	The regimes accept it folded into the information security policy; when neither is listed, the gap is counted once, under the parent.
Expected owner	Legal or the compliance officer.
Review cadence	Annual (the register's default: the clauses say planned intervals and on significant change, and do not fix a period).
On the gap list when	never on its own: the register recognises it and names the clauses, but no ticked regime lists it as a separate document (its parent, information security policy, is).
Template	Compliance risk management policy.

Compliance policy

How the register reads it

Which standards require it, and what each expects it to contain

Also governs

Do this for every document on your list