Policy Templates (Core)

Policy Template for Workstation Security
The purpose of this policy is to provide guidance for security for {{ organization.name }} workstations in order to ensure the security of information...
Policy Template for Vendor Management
The purpose of this policy is to set forth the guidelines that should be followed to maintain the security of organization's information systems and d...
Policy Template for Server Security
The purpose of this policy is to establish standards for the base configuration of internal server equipment that is owned and/or operated by {{ organ...
Policy Template for Risk Assessment
Information security risk management is the process of identifying, evaluating, and treating risks around the organization’s valuable information. It ...
Policy Template for Network Security
One of {{ organization.name }} objective is to secure its internal network, network connections and resources from intrusions and to provide/maintain ...
Policy Template for Information Security
The purpose of this policy is to direct the design, implementation and management of an effective Information Security Program, which ensures that {{ ...
Policy Template for Change Management
The purpose of this policy is to establish management direction and high-level objectives for the change management process. This policy guides the im...
Policy Template for Business Continuity and Disaster Recovery
This document defines {{ organization.name }}’s policy directive on business continuity activities, including business continuity and disaster recover...
Policy Template for Incident Management
The purpose of this policy is to provide guidelines to manage security incidents that threaten the confidentiality, integrity or availability of infor...
Policy Template for Access Control
The purpose of this policy is to establish direction and requirements for access to {{ organization.name }} data, information and systems, and, to ens...