Description
All 39 standalone policies, standards, and procedures listed in this catalog.
What this covers
- 18 policies, 10 standards, and 11 procedures
- Consistent structure and document control fields
- One tailoring guide for the whole library
Included files
- 18 policies (Word), each with its own completion guide
- Workforce Acknowledgement Form for the Information Security Policy (Word)
- 10 standards (Word), each with its decision table
- 11 procedures (Word)
- User Access Review and Removal Tracker (Excel)
- Tailoring Guide (Word)
- Library Register (Excel)
Purchase and delivery
Template: $1,699. Editable package for your team to tailor. Account download after a confirmed order. Organizational review, approval and implementation are your responsibility.
Customization of the full set is quoted as a separate project before payment.
View the 39-document manifest
18 policies
- Information Security Policy
- Configuration Management Policy
- Access Control Policy
- Incident Response Policy
- Acceptable Use Policy
- Asset Management Policy
- Information Classification and Handling Policy
- Risk Management Policy
- Third-Party Risk Management Policy
- Vulnerability Management Policy
- Change Management Policy
- Logging and Monitoring Policy
- Backup and Recovery Policy
- Security Awareness and Training Policy
- Remote Work Policy
- Physical Security Policy
- Data Retention and Disposal Policy
- Business Continuity Policy
10 standards
- Secure Configuration Standard
- Password and Authentication Standard
- Encryption and Key Management Standard
- Security Logging Standard
- Vulnerability Remediation Standard
- Endpoint Security Standard
- Network Security Standard
- Remote Access Standard
- Information Handling Standard
- Backup and Restoration Standard
11 procedures
- User Access Review Procedure
- Account Provisioning and Termination Procedure
- Change Control Procedure
- Configuration Baseline Management Procedure
- Patch and Vulnerability Remediation Procedure
- Incident Triage and Escalation Procedure
- Security Log Review Procedure
- Security Risk Assessment Procedure
- Vendor Due Diligence Procedure
- Backup Restoration Testing Procedure
- Security Exception Management Procedure
Includes the tracker packaged with the User Access Review Procedure. Separately sold workbooks, bundle-exclusive additions, assessments, sessions, and customization are excluded.
Scope and use
Templates are licensed for use within one organization and may not be resold. Your organization must review, approve and implement the documents. Framework mapping is included only if expressly stated in the agreed scope. Documents and advisory work do not certify compliance or guarantee an audit outcome. Use is subject to the license and purchase terms provided at checkout.