What policies can a small business need?
The right set depends on how your business works, but common areas include information security, data protection and privacy, passwords and access control, acceptable use, backups and recovery, remote working, personal devices, data retention, staff security responsibilities and incident response.
Useful for more than formal certification
Businesses can need documented policies when customers or supply chains ask security questions, when organising cyber insurance information, when preparing for Cyber Essentials, when employing staff, or simply when management wants clearer rules around systems and information.
Tailored documents without the consultancy overhead
ComplyMATE asks straightforward questions about your business, staff, data, devices, cloud systems and current security practices. The paid packs then create editable Word and PDF documents, together with a security risk review and priority improvement checklist.