A short network security policy template covering authorised access, protecting information on the network, awareness training and reporting weaknesses.
This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Policy number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested policy templates. No junk, jargon or unnecessary content. Simple and usable policy templates
developed over 25 years through practical use in the real world.
Further guidance on network and cyber security:
Download this policy template with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This policy is also included in the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like this policy prepared for your organisation along with the rest of your company policies, or help with your information security risk assessment and treatment plan, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Network Security Policy Template
A network security policy template making sure the organisation's network is effectively managed, can only be accessed by authorised users, and can withstand or recover from threats to its availability, integrity and confidentiality.
The policy has Approved By and Date Approved fields and carries a Public information classification, so it can be shared with workers, clients and other interested parties.
What the Network Security Policy Covers
- Access - the network available to workers when required, but only to authorised users
- Information on the network - treated as a company asset, and protected against unauthorised access, disclosure, modification, loss or misuse
- Resilience - the network able to withstand or recover from threats
- Commitments - protecting hardware, software and information assets, protection proportionate to the risks, network security awareness training, and legal, regulatory and internal requirements
- Reporting - actual or suspected security incidents and weaknesses reported straight away
- Breaches - handled under the disciplinary procedure
- Scope - all wired and wireless networks and the cloud services used for storing and sharing information
Checked Against Cyber Essentials
The IT policies in the range have been checked against the Cyber Essentials requirements, so their rules on passwords, devices, access and updates do not contradict what a Cyber Essentials assessment asks for.
Written to Be Shared
Like every alphaZ policy, this is written as a public policy statement that can be shared openly with workers, customers, suppliers and assessors. The internal detail of how it is carried out belongs in your procedures.
Using the Policy
Add your company name and logo, check each commitment matches what your organisation does and edit any that do not, then approve and date the policy and share it with workers and anyone else who needs to see it.
Who Needs a Network Security Policy?
Organisations working to ISO 27001, where network security is one of the Annex A controls, and organisations applying for Cyber Essentials.
Included in the ISO 27001 Toolkit
This policy is part of the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001.
Works with the Vulnerability Management Procedure
The PP-8-07 Technical Vulnerability Management Policy Procedure covers technical vulnerabilities, and the PP-8-100 Information Security Policy Procedure carries the wider information security policies.
Document Control
The footer carries the policy number and title, information classification, version and page numbers, and the approval fields record who approved the policy and when, so it can be controlled with the rest of your management system documents and listed on a document register such as the F-IMS20 Document Register.
Related Policies
Would you rather we prepared it for you?
Our Company Forms, Policies and HR Reset service prepares your policy set, staff handbook and HR forms as one branded set, tailored to how you actually run things.
Company Forms, Policies and HR Reset