P-20 Information Security Policy
| File Reference : | P-20 Information Security Policy |
A one-page information security policy template that covers what ISO 27001 asks the policy to include, ready for top management to approve and date.
This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Policy number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested policy templates. No junk, jargon or unnecessary content. Simple and usable policy templates
developed over 25 years through practical use in the real world.
Further guidance on the information security policy:
Download this policy template with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This policy is also included in the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like this policy prepared for your organisation along with the rest of your company policies, or help with your information security risk assessment and treatment plan, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Information Security Policy Template
A one-page information security policy template for an information security management system (ISMS) to ISO 27001:2022. It recognises information as a critical business asset and commits to protecting the organisation's information and the information entrusted to it.
The policy has Approved By and Date Approved fields and carries a Public information classification, so it can be shared with workers, clients and other interested parties.
What the Information Security Policy Covers
- ISMS - an information security management system operated and maintained to ISO 27001:2022
- Controls - organisational, people, physical and technological measures to secure information assets
- Compliance - applicable laws, regulations and other requirements related to information security
- Continual improvement - improvement initiatives, including risk assessment and risk treatment
- Objectives - information security objectives and performance communicated throughout the organisation and to interested parties
- Interested parties - working closely with them, and protecting the information customers and others entrust to the organisation
- Awareness - information security awareness training for all staff
- Responsibility and review - the responsibility of all workers with management support, and ongoing review of the framework and controls
Built for ISO 27001 Clause 5.2
- Appropriate to the purpose of the organisation - the opening statement on information as a critical asset
- A framework for information security objectives - objectives and performance communicated and reviewed
- A commitment to satisfy applicable requirements related to information security
- A commitment to continual improvement of the ISMS
- Communicated within the organisation and available to interested parties
Using the Policy
Add your company name and logo, check each commitment matches what your organisation does and edit any that do not, then approve and date the policy and share it with workers and anyone else who needs to see it.
Who Needs an Information Security Policy?
Every organisation working to ISO 27001, where top management establishes the information security policy, and organisations asked for an information security policy by customers or in supplier questionnaires.
Included in the ISO 27001 Toolkit
This policy is part of the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001.
Works with the Information Security Policy Procedure
The PP-8-100 Information Security Policy Procedure carries the topic-specific information security policies as sections, and the F-IMS26 Statement of Applicability records the controls that apply.
Related Policies
Would you rather we prepared it for you?
Our Company Forms, Policies and HR Reset service prepares your policy set, staff handbook and HR forms as one branded set, tailored to how you actually run things.
Company Forms, Policies and HR Reset