IT Security Policy

The IT Security Policy is used to define the standards for protecting your business information, especially sensitive and personal information, from unauthorised collection, use, disclosure, retention or destruction.

The policy outlines and defines scope, information security principles, anti-virus software, emails, passwords and personal communication devices (such as hand-held devices like smart phones). It also includes a receipt and acknowledgement declaration.

This type of policy you should get all staff to sign.