IT security policy

It is free to fill in online and needs no account. The finished Word document and PDF cost €4.99, paid once. See all IT and projects templates

• Company name

  For example: Brightwater Analytics

• Policy starts on

  For example: 1 January 2027

• Policy owner

  For example: Head of IT

• Where to report a security problem

  For example: security@brightwater.example, or +353 1 555 0199 at any time

• Who the policy covers

  For example: all employees, contractors and visitors who use the company's systems or data

• Minimum password length (characters)

  Longer is safer. A passphrase works well.

  For example: 14

• Systems that must use multi-factor sign-in

  For example: email, the cloud storage, the code repository, the accounting system and the admin tools

• Backups

  For example: Company data is backed up every night, copies are kept for 30 days in a separate place, and restores are tested every quarter.

• Days to apply critical security updates

  For example: 7

• Hours to report a suspected incident

  How soon staff must report it. Sooner is better.

  For example: 24

• Approved tools (optional)optional

  For example: Password manager: Bitwarden. File storage: company Google Workspace only. Chat: Slack.

1. 11. Purpose and scope
2. 22. Access and passwords
3. 33. Devices
4. 44. Email, links and the internet
5. 55. Data
6. 66. Updates and backups
7. 77. Suppliers
8. 88. Reporting and handling incidents
9. 99. Breaking this policy
10. 1010. Training and review

1. 01

   Fill in

   Type your details in the form. The document fills itself in as you type; click any gap to jump to its field.

2. 02

   Check

   Read it through. Gaps you have not filled stay marked, so nothing goes out half done.

3. 03

   Download

   Pay once and get it as a Word document to edit further and as a PDF to send or print. The link comes by email too.

What details does this template ask for?

The form asks for 11 details, starting with Company name, Policy starts on, Policy owner, Where to report a security problem, Who the policy covers. 1 more are optional.

How much does this template cost?

€4.99, paid once. Filling it in and seeing the first part is free. You pay when you download the finished Word document and PDF, with no account and no subscription. Every paid nerix plan includes it.

Can I download this template as Word or PDF?

Yes. When you have filled in the form, press Download and pay once. You get the finished document as a Word file to keep editing and as a PDF to send or print, and the link by email.

Is what I type sent anywhere?

While you fill it in, what you type stays in your browser. When you buy the document, your answers go to nerix to make your files. They are kept for seven days so you can download again, then deleted.

What should I check before I use this template?

A policy does not make a company secure by itself. It works only if it matches what people really do, is explained to them, and is backed by the tools it names. Laws on data protection, breach reporting and specific sectors (health, finance) may add duties. Check what applies to you, and keep the policy short enough that people read it.

Are these IT and project templates free?

Most are. Fill in and download them for free as Word or PDF, with no account. A few longer documents are premium: free to fill in, paid once to download, and marked with their price.

Does a security policy make us secure?

No document does that alone. A policy helps when it matches what people really do, so keep it short, explain it to your team and review it every year.

Is a project charter only for large projects?

No. A small project benefits too, because one page that names the goal, the limits and the decision maker prevents most arguments later.

• API integration specificationSpecify how two systems connect: what data moves, how it is secured, how errors are handled and who owns it.IT and projects
• Architecture decision recordRecord a technical decision with its context, options, reasons and consequences, for the team to find later.IT and projects
• Bring your own device policySet the rules for using personal phones and laptops for work: security, privacy, support and leaving.IT and projects
• Bug reportReport a software problem so a developer can repeat it, judge its impact and fix it.IT and projects
• Change management planPlan how people will be told, trained and supported through a big change, and how you will know it worked.IT and projects
• Change requestAsk for a change to a project or system, show its impact and record whether it is approved.IT and projects

See all IT and projects templates