An Information Security Policy outlines the management of information within your business. This agreement can apply to employees, contractors, volunteers, vendors, and anyone else who may have any access to systems, software, and hardware. An Information Security Policy is essential to clarify your information procedures and govern how employees are to handle your physical documents. An Information Security Policy identifies threats to your information assets and explains how they can be protected. This policy is also designed to help your employees or contractors understand their role in protecting sensitive information. 

Use this Information Security Policy If:

• You want to protect your business from online attacks and breaches
• You want to inform employees or contractors about how to handle sensitive information and infrastructure
• Your business owns or leases any information assets

What does this Information Security Policy Cover?

• Password Requirements
• Email Security
• Physical documents
• Device Security and Using personal devices
• Transferring Data
• Working Remotely
• Acceptable uses
• Security requirements 
• Disciplinary Action

Other Documents You May Need:

• IT Policy
• Privacy Policy
• Non-Disclosure Agreement
• Confidentiality Agreement