A straightforward Information Security Policy for home businesses and small consultancies. A free download that covers fundamentals and is written in plain language. Use this to publish a policy that can improve the security of your operations and activities, and better meet requirements for secure clients.
This template provides setup instructions, core policies, and suggested additional policies to create your Information Security Policy:
Free download: [CONFIDENTIAL] Information Security Policy - FREE TEMPLATE for small organisations v1.0.pdf
License: MIT License for free use (without conditions)
This security policy template aims to align with the Australian Signals Directorate (ASD) - Essential Eight and the New Zealand Hīkina Whakatutuki Ministy of Business, Innovation & Employment (MBIE) - Protecting Business Data guide.
You can adopt a policy based on this template to work with clients who need to assure that their third parties and partners have plans in place to protect their data.
Language extract:
3.4 Vulnerability Scanning
- We conduct checks for vulnerabilities on our devices, networks, and any devices on those networks. We escalate any detected issues to our IT Contact within 24 hours.
With a policy in plain language, you can train your team or commicate your policy to others without needing to translate from complex or legalese language.
If you’re a small organisation,and you typically work from home, small offices, and on site with your clients, this Information Security Policy template is a great starting point to give you the essentials.
Follow these steps to publish your own policy:
- Download the free template
- Insert your organisation's details and IT contact's details
- Customise the template to meet your specific organisational needs
- Publish an Information Security Policy for operational use
- Train yourself and your team on following your policy
- Review regularly.
If you would love more resources like this from us, follow us on LinkedIn and contact us with any resources you’d like to see for business modelling, financial design, digital product development, and tooling modernisation.
