Policy Templates
NIS2
Acceptable Use Policy
Rules for the appropriate use of company systems and devices.
Use Template →GDPR
Data Retention Policy
How long each category of personal and business data is kept, and when it is deleted.
Use Template →NIS2
Incident Response Plan
Step-by-step procedure for detecting, containing and reporting security incidents.
Use Template →NIS2
Supplier Security Policy
Baseline security requirements for vendors with access to Northwind systems or data.
Use Template →ISO 27001
Access Control Policy
Logical and physical access control rules per ISO 27001 Annex A 5.15–5.18 and 8.2–8.5.
Use Template →ISO 27001
Cryptography Policy
Rules for the effective use of cryptography and key management per ISO 27001 Annex A 8.24.
Use Template →