Cyber Security Policy

Business Size: 5–30 staff

Capability Stage: Documented Controls

Outcome:

A tailored, board-ready Cyber Security Policy framework.

What It Does

• Defines baseline security controls

• Formalises roles and responsibilities

• Establishes incident response structure

• Aligns governance expectations

• Provides insurer-ready documentation

Why It Matters

Insurers and tender panels require structured governance.

This establishes accountability without unnecessary complexity.

Includes

• Custom 15–25 page policy

• Defined MFA, patching, backup and access controls

• Incident response framework

• Roles and responsibilities matrix

• 60-minute scoping session

• Word and PDF versions

• One revision round

Excludes

× Technical implementation of controls

× Ongoing policy maintenance

× Continuous compliance monitoring

Delivery Time: 10 business days