...
An identity management practice statement (IMPS) is defined in the SWAMID Policy:
...
- The identity management practice statement should be short and to the point.
- Describe essential processes in detail - bullet points and short descriptions are usually enough.
- Make sure the description matches reality. In the case of a security breach you will be audited against your current practice statement.
- An identity management practice statement template is available at SWAMID Assurance How-To.