P-43 Data Loss Prevention Policy
| File Reference : | P-43 Data Loss Prevention Policy |
A data loss prevention policy template covering filing, mobile devices, the controls that protect information, and reporting any loss of data straight away.
This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Policy number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested policy templates. No junk, jargon or unnecessary content. Simple and usable policy templates
developed over 25 years through practical use in the real world.
Further guidance on protecting data:
Download this policy template with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download.
If you'd like this policy prepared for your organisation along with the rest of your company policies, or help with your information security risk assessment and treatment plan, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Data Loss Prevention Policy Template
A data loss prevention policy template recognising data as a critical business asset and setting out how the confidentiality, integrity and availability of company data are protected, and what to do when data may have been lost.
The policy has Approved By and Date Approved fields and carries a Public information classification, so it can be shared with workers, clients and other interested parties.
What the Data Loss Prevention Policy Covers
- Electronic filing - file naming conventions, a documented filing structure and clearly labelled documents
- Mobile devices and remote access - information only on checked and approved devices, secured with technical controls
- Monitoring and backups - ongoing monitoring of systems and networks, and regular backups that are tested
- Data protection and access control - personal data protected and access granted on a least privilege basis
- Passwords, equipment and software - secure passwords, IT equipment identified and listed, and controls on software
- Physical security and disposal - clear desk and clear screen, secured premises, and secure disposal of equipment
- Own equipment, training and checks - controls on own equipment, awareness training, and background checks where lawful
- Review - ongoing review of the framework, documentation and controls
- Reporting data loss - lost or stolen devices, misdirected emails and unauthorised access reported to management straight away
Checked Against Cyber Essentials
The IT policies in the range have been checked against the Cyber Essentials requirements, so their rules on passwords, devices, access and updates do not contradict what a Cyber Essentials assessment asks for.
Using the Policy
Add your company name and logo, check each commitment matches what your organisation does and edit any that do not, then approve and date the policy and share it with workers and anyone else who needs to see it.
Who Needs a Data Loss Prevention Policy?
Organisations working to ISO 27001, where data leakage prevention is one of the Annex A controls, and any organisation holding confidential or personal data.
Works with the Classification Procedure
The PP-8-12 Information Classification and Protection Policy Procedure covers how information is classified and protected.
Document Control
The footer carries the policy number and title, information classification, version and page numbers, and the approval fields record who approved the policy and when, so it can be controlled with the rest of your management system documents and listed on a document register such as the F-IMS20 Document Register.
Related Policies
Would you rather we prepared it for you?
Our Company Forms, Policies and HR Reset service prepares your policy set, staff handbook and HR forms as one branded set, tailored to how you actually run things.
Company Forms, Policies and HR Reset