Governance & Compliance Documentation

Practical policy packs for small organisations

Clear, professionally presented policies, procedures and supporting documents tailored to your organisation. Our documentation packs can help small businesses establish consistent working practices, respond to customer requirements and support wider work towards ISO/IEC 27001 alignment.

Business documentation and digital governance

Designed to support good information security governance

Documentation can be developed with recognised information security practices in mind and used as part of an organisation's wider work towards ISO/IEC 27001 alignment.

Documentation Packs

Choose the documents that your business needs

Packs can be supplied individually or combined to create a broader set of governance documentation. Each document is adapted to reflect your organisation, systems and working practices.

Information Security Policy Pack

A practical set of core policies covering the secure use of business systems, devices and information.

  • Information Security Policy
  • Acceptable Use Policy
  • Password and Authentication Policy
  • Remote Working Policy
  • Device and Equipment Policy

Data Protection Policy Pack

Core documents to help smaller organisations explain and manage how they handle personal information.

  • Data Protection Policy
  • Website Privacy Notice
  • Data Retention Schedule
  • Cookie Policy
  • Data Breach Procedure

Microsoft 365 Governance Pack

Straightforward documentation for managing accounts, mailboxes, Teams and SharePoint within a small organisation.

  • User Administration Procedure
  • New Starter Checklist
  • Leaver Checklist
  • Shared Mailbox Guidance
  • Teams and SharePoint Guidance

Website & Hosting Pack

Supporting documents for organisations that operate websites, online services or managed hosting.

  • Website Management Policy
  • Website Maintenance Schedule
  • Backup Procedure
  • Administrator Access Register
  • Hosting Information Record

Digital Workplace Policy Pack

Clear policies for staff using company technology, email, internet services and personal devices.

  • Working From Home Policy
  • Bring Your Own Device Policy
  • Email and Internet Use Policy
  • Software Installation Policy
  • Clear Desk and Screen Guidance

Bespoke Documentation Pack

A tailored selection of policies and supporting documents based on your organisation's systems and customer requirements.

  • Selected Policies From Multiple Packs
  • Existing Document Updates
  • Organisation-Specific Procedures
  • Customer Security Questionnaires
  • Branded Document Templates

Flexible Documentation

Start with one policy or build a complete documentation set

Small organisations do not always need a large or complicated set of governance documents. We can help you identify the policies that are most relevant to your business and provide them in a clear, manageable format.

Documents can be supplied as individual policies, themed packs or a tailored combined pack covering several areas of your business.

1

Individual policies

Choose a particular policy or procedure when you only need one gap filled in your existing documentation.

2

Ready-structured policy packs

Select a themed collection of related documents covering information security, data protection or digital working.

3

Tailored combined packs

Combine documents from several packs to create a set that reflects your organisation's particular requirements.

4

Review and update existing documents

Improve older or generic policies so that they better reflect your current systems, responsibilities and working practices.

Practical Documentation

Created for smaller organisations,

Documentation should be clear enough to understand, realistic enough to follow and proportionate to the size of your organisation.

Tailored Documents

Wording adapted to your organisation rather than supplied as an untouched generic template.

Plain English

Clear policies that staff and managers can understand without unnecessary technical or legal language.

Good-Practice Alignment

Developed with recognised information security practices and ISO/IEC 27001 alignment in mind.

Easy to Maintain

Documents can include ownership and review information so they remain manageable as your organisation changes.

Need practical policies for your small business?

Tell us which documents you already have and where the gaps are. We can provide an individual policy, a structured documentation pack or a tailored selection suited to your organisation.

Contact Us
Scroll to Top