Policy template

IT Operations Policy template

This policy exists to ensure information systems are operated reliably and securely. It applies to servers, networks, endpoints, applications and cloud services operated by or for the company.

Create this policy

What the policy contains

Operating procedures
Maintenance and patching
Logging and backup

Who is responsible

IT Manager
System owners
Information Security Manager

What you decide

Critical security patches applied within (days)
Logs kept for (months)
Capacity reviewedQuarterly · Every 6 months · Yearly
Systems are monitored with automatic alerts

References covered

ISO/IEC 27001 Annex A: control 5.37
ISO/IEC 27001 Annex A: control 8.6
ISO/IEC 27001 Annex A: control 8.7
ISO/IEC 27001 Annex A: control 8.8
ISO/IEC 27001 Annex A: control 8.13
ISO/IEC 27001 Annex A: control 8.15
ISO/IEC 27001 Annex A: control 8.16
GDPR: Art. 32 security of processing
NIS2: Art. 21(2)(e) security in network and information systems acquisition, development and maintenance
NIS2: Art. 21(2)(g) basic cyber hygiene practices

IT Operations Policy template

What the policy contains

Who is responsible

What you decide

References covered

Other policy templates

IT Operations Policy template

What the policy contains

Who is responsible

What you decide

References covered

Other policy templates