Policy templates
Company policy templates
Each policy has its own professional template: you choose your rules in a short form, then review, edit, approve and download the draft.
Information Security Policy
To set management's direction and commitment for protecting the confidentiality, integrity and availability of information.
Acceptable Use Policy
To define how staff may use company information, devices, accounts and internet services.
Access Control Policy
To ensure that access to information and systems is authorised, limited to business need and regularly reviewed.
Password Policy
To define how passwords and other authentication information are created, protected and managed.
Bring Your Own Device (BYOD) Policy
To allow the use of personal devices for work while keeping company information protected.
Remote Work Policy
To protect information accessed, processed or stored outside company premises.
Business Continuity Policy
To ensure critical activities continue, or resume within acceptable timeframes, during and after a disruption.
Backup & Recovery Policy
To ensure information and systems can be restored within agreed timeframes after loss, corruption or disruption.
Incident Management & Response Policy
To ensure information security events are reported, assessed and handled quickly and consistently, and that lessons are learned.
Change Management Policy
To ensure changes to information systems are assessed, approved, tested and recorded so they do not compromise security or availability.
IT Operations Policy
To ensure information systems are operated reliably and securely.
Asset Management Policy
To ensure information and associated assets are identified, owned, classified and protected throughout their life cycle.
Supplier Security Policy
To ensure suppliers that access, process or support company information maintain an appropriate level of security.
Data Protection (Privacy) Policy
To ensure personal data is processed lawfully, fairly and securely, and that the rights of individuals are respected.
Data Retention Policy
To ensure records are kept as long as required and securely deleted afterwards.
Clear Desk & Clear Screen Policy
To reduce the risk of unauthorised access to information left on desks, screens and printers.
Cryptography & Encryption Policy
To ensure cryptography is used effectively to protect the confidentiality, authenticity and integrity of information.
Logging & Monitoring Policy
To ensure security events are recorded, protected and reviewed so incidents are detected and investigated.
Vulnerability Management Policy
To ensure technical vulnerabilities are identified, assessed and fixed before they can be exploited.
Acceptable Use of AI Policy
To define how staff may use artificial intelligence tools safely, lawfully and responsibly.
Project Management Policy
To run projects in a consistent, controlled and transparent way, from initiation to closure.
Quality Management Policy
To deliver products and services that meet customer and regulatory requirements, and improve them continually.
Human Resources Policy
To manage recruitment, employment and departures fairly, lawfully and consistently.
Procurement Policy
To buy goods and services at the right quality and cost, with transparent and controlled decisions.