Build Your Policies

What happens after an incident depends on what was written down before it.

Policies are the foundation of a stronger security program

The Fix It Toolkit provides free policy templates to help organizations set clear security expectations, formalize their processes, and strengthen security across the business.

Whether you're writing policies for the first time or improving the ones you have, these resources help you get started faster.

Free, editable, ready-to-use policy templates

Practical templates to help you put foundational security policies in place quickly. Each one can be adapted to your organization's size, requirements and business needs.

Artificial Intelligence & Machine Learning policy A template to provide an organization with the framework to manage and secure AI/ML tools, applications, systems, and workflows. Download
Business Continuity policy A template to assist an organization with continuing the delivery of products or services following a disruptive incident or event. Download
Change Control policy A template to create a systematic framework for how organizational changes can be initiated, evaluated, approved, implemented, and documented. Download
Data & Asset policy A template to provide a structured framework for identifying, classifying, and managing organizational data and assets according to their sensitivity and criticality. Download
Disaster Recovery policy A template to document and structure an approach for an organization to resume work after a disaster. Download
Incident Response policy A template to assist an organization to build a plan to respond to a security incident. Download
Risk Management policy A template to assist an organization with the identification, assessment, and response to risks through risk assessments and implementation of security controls. Download
Training & Awareness policy A template to assist an organization with building a program to share security information and protocols with relevant personnel. Download
Work From Home policy A template to establish and document an organization's requirements and expectations for personnel accessing company systems and content remotely from a home or off-site environment. Download
Why policies matter

Security depends on people knowing what's expected

Technology is important, but strong security depends on people, processes and clear expectations.

Policies help teams understand their responsibilities, keep practices consistent, and reduce the chance of the everyday mistakes that lead to incidents. These templates give you a proven starting point.

Save time

Use proven templates approved by the major Studios instead of writing policies from scratch.

Create consistency

Set the same expectations across teams and locations.

Support growth

Build a security foundation that scales with the business.

Save cost

Many security companies charge for policy templates. These are free.

Not sure which policies you need?

Start with the areas that present the greatest risk to your organization.

Consider completing the free TPN Questionnaire and Gap Analysis first — your results will show which policies and practices require attention now.

Find your gaps first →
Up next for Sam

Find funding to get more done

Not every improvement is free. Some of the fixes beyond the Fix It Toolkit will need a budget Sam doesn't have, so Sam started to look at what funding and support was available. The grants & free support list sets out the schemes on offer and who is eligible for each one.

Fund your fix →