Do any of you have policy and procedures in place to address who and how changes are made to your websites?

As per the policy and procedures adopted by our organization, the authority for approving changes is laid down; contact person is designated and all communication to web hosters is done by this person only; agreement with web hoster provides for periodic updates / changes, as and when advised to him.

You need to establish and enforce a sign-off system that guarantees review by the compliance officer before any page is posted, removed or changed. Compliance examiners are looking at website content and you can't afford for them to discover sophmoric errors. Not only will the errors be criticized, but the reputation of your compliance program will take a hit, too.

Pal, did you just add the verbage to your Internet Policy? Did you obtain a sample policy to follow?

Sorry could not visit the webpage for a few days due to pre-occupation. Anyway, we did not see any policy to start with.