What is the difference between a policy and a control?
In an organization, a service desk team employs experienced staff who have worked there for many years and have good relationships with support teams. The organization has a good improvement culture, and staff are encouraged to use their experience and identify improvements. They are developing a new policy for handling incidents.
Which is the BEST approach for this new policy?