IT Security Policy – Template 4

Information is an important, valuable asset of the Company which must be managed accordingly. All information has a value to the Company. However, not all of this Information has an equal value or requires the same level of protection.
Access controls are put in place to protect information by controlling who has the rights to use different information resources and by guarding against unauthorized use.
Formal procedures must control how access to information is granted and how such access is changed.
This IT Security Policy describes how to use information systems resources to ensure information security within the Company. The policy refers, without limiting, at confidentiality, integrity, availability, risk management and access control of Company’s Information Systems.