Protect · Policies & Standards
Security policies people can actually use.
Good policies should make security clearer, not create paperwork. We help organisations put practical security expectations in place that reflect how they actually work.
Our approach
How we approach policies.
Start with how you work
Policies should reflect your organisation, systems, people and actual ways of working rather than forcing the business into a generic template.
Keep them proportionate
Smaller organisations do not need unnecessary layers of policy. We focus on the areas that matter and make expectations clear.
Make them usable
A policy only helps if people understand what it means for them. We use clear language, practical requirements and sensible ownership.
What we offer
Options and pricing.
Choose the piece that fits, or talk to us about combining them. Fixed prices apply where the scope is predictable; where it depends on your organisation, we say what affects it.
Cyber Security Policy Review
For organisations that already have security policies but want confidence that they remain appropriate and useful. The review considers relevance, clarity, consistency, obvious gaps and whether the policies remain appropriate for the organisation.
- Review of up to five agreed core cyber or information security policies
- Identification of material gaps, inconsistencies and areas for improvement
- Practical recommendations
- Annotated or tracked improvements where appropriate
- Short findings discussion
Additional policies or substantial redevelopment are scoped separately.
£495
Up to five agreed core policies.
Cyber Security Policy Suite
Tailored core cyber security policies for organisations establishing or substantially improving their security foundations. The exact suite is agreed based on organisational need; not every organisation needs every potential policy area.
- Requirements discussion
- Tailoring to how your organisation works
- Final documents
- Implementation walkthrough
From £1,250
Core suite, tailored to your organisation.
Additional policies and implementation support
Further policy development, substantial redevelopment, supporting standards or guidance, and help putting policies into practice through communication, ownership and review arrangements.
Quoted separately
Scoped together after an initial conversation.
Need the health check, core policies and training together? Cyber Foundations combines them for £2,250.
View the package →Not just templates
Your organisation. Not your name on a template.
Generic templates can be useful starting points, but changing the company name at the top doesn't make a policy appropriate. We look at how your organisation actually works, what needs protecting, who is responsible and what people can realistically be expected to do. The result should be proportionate to your organisation and useful in practice.
Core policy suite
What a core suite can cover.
The appropriate policies depend on your organisation and are agreed during scoping.
Information & cyber security
The overall approach to protecting systems and information.
Acceptable use
Clear expectations for using organisational technology and services.
Access, passwords & MFA
How access is managed and protected.
Remote & flexible working
Security expectations when working away from normal premises.
Security incidents
What people should report and how the organisation responds.
Information handling
Expectations for storing, sharing and protecting information.
Supplier security
Proportionate expectations when third parties access information or systems.
What you get
What you should leave with.
- Clear security expectations appropriate to your organisation
- Policies written in plain English
- Defined ownership and responsibilities
- A practical basis for communicating security expectations to your people
- Greater confidence when customers or other stakeholders ask about your security arrangements
Related
Often combined with
Policies only work when people know what they say, which is why many organisations run awareness training alongside them.
Free 20-minute consultation
Talk to us about your policies.
Whether you're starting from scratch or already have policies in place, tell us what has prompted the requirement and we'll help you work out the right starting point.