This policy will help your organization safeguard its hardware, software and data from exposure to persons (internal or external) who could intentionally or inadvertently harm your business and/or damage physical assets. From the policy: PHYSICAL SECURITY GUIDELINES AND REQUIREMENTS The following guidelines should be followed in designing and enforcing access to IT assets. Server room/IT ...

The purpose of this policy from TechRepublic Premium is to provide guidelines for the practice of whistleblowing to ensure unethical and/or illegal acts can be investigated, and guilty parties punished to protect the organization and its employees. This policy can be customized as needed to fit the needs of your organization. From the policy: A ...

Data breaches can cost companies tens of thousands of dollars or more and can pose a significant risk to company operations and reputation. Customer information is usually one of the favorite targets of hackers as it entails confidential details which can be used to commit property or identity theft. Even innocent mistakes such as a ...

When employees suffer accidents or illnesses, it may become necessary for them to take a leave of absence on a short-term basis. Offering short-term disability insurance for your employees enables them to remain free from worry about earning an income if they are sick or injured. This, in turn, makes the business an attractive employer ...

This policy from TechRepublic Premium will help you create security guidelines for devices that transport and store data. You can use it as-is or customize it to fit the needs of your organization and employees. From the policy: The IT department will be responsible for implementing, adhering to and maintaining these controls. For the purposes ...

A safe and healthy work environment provides the foundation for all employees to be at their most productive. Not only does it promote productivity in the workforce, but it also helps prevent accidents, lawsuits and, in extreme cases, serious injury and loss of life. A clear and robust ergonomic policy, like this one from TechRepublic ...

No matter where in the world an enterprise operates, politics is going to play a major role in the lives of its employees. Depending on the country and the current political situation, it’s possible for affiliations, candidates and political parties to become a driving passion in your workforce. While an actively engaged workforce taking interest ...

The importance of diversity and inclusion in any given organization cannot be overstated. It establishes a level playing field, brings together people with different backgrounds, perspectives, traditions and ideas and enriches company culture by ensuring fairness and tolerance. This helps build a more effective and collaborative workforce which enables the business to run in a ...

Software development is a complex process that involves a specific series of steps (known as the development lifecycle) to transform a concept into a deliverable product. The steps involved with creating the finished product must be carefully adhered to yield the best results, reduce inefficiencies and maximize customer satisfaction. The purpose of this policy from ...

The purpose of this policy from TechRepublic Premium is to provide guidelines for the appropriate retention and disposal of physical and electronic documents. Specifically, this policy establishes and describes how the company expects its employees to manage company information (whether electronic files, hard copies or other formats) from creation through destruction, according to applicable laws ...

PURPOSE The purpose of this Bring your own device policy from TechRepublic Premium is to provide requirements for BYOD usage and establish the steps that both users and the IT department should follow to initialize, support and remove devices from company access. These requirements must be followed as documented in order to protect company systems ...

PURPOSE The purpose of this policy from TechRepublic Premium is to provide guidelines for appropriate entry, presence and operations conducted within your company’s data center. This policy can be customized as needed to fit the needs of your organization. From the policy: DATA CENTER ACCESS POLICY DETAILS The following guidelines should be implemented: The data ...

PURPOSE The purpose of this policy from TechRepublic Premium is to provide procedures and protocols for supporting effective organizational asset management specifically focused on electronic devices. This policy can be customized as needed to fit the needs of your organization. From the policy: ASSET CONTROL POLICY DETAILS Definition of assets Assets can be defined both ...

PURPOSE This policy from TechRepublic Premium provides guidelines for the reporting of information security incidents by company employees. The goal is to facilitate the security response and remediation process to ensure the least amount of potential damage to systems, networks, customers and business reputation. From the policy: POLICY DETAILS An information security incident is defined ...

PURPOSE Every enterprise needs to establish a plan of action to assess and then recover from unauthorized access to its network. This policy from TechRepublic Premium provides a foundation from which to start building your specific procedures. From the policy: ASSIGN AN INCIDENT RESPONSE TEAM An incident response team should be put together and a ...