Recommended for
Organizations formalizing security ownership, assets, access and authentication controls.
CORPORATE POLICY PACKAGE
Security Controls Foundation Pack
Establishes a coherent baseline for security governance, asset handling, access, authentication and accountability.
5 DOCUMENTSDrafts for internal review
Included documents
- Information Security Policy
- Information Asset Classification & Handling Policy
- Access Rights Management Policy
- Account, Password & MFA Policy
- Security Roles & Responsibilities Matrix
Expected outcomes
- Risk-based asset and access rules
- Joiner-mover-leaver access controls
- Reviewable evidence and exceptions
PREPARATION MATERIALS
Materials to review before drafting
Materials need not be complete. Missing information also helps define the drafting scope.
System and information-asset inventory
Identity provider and account-management process
Network, cloud and SaaS architecture
Security incidents, audits and customer requirements
REQUEST A SCOPE
Discuss the drafting scope
Tell us what you have and when you need it, and we will outline the materials and scope.