You do not have to write every policy from scratch. The policy generator creates a draft from a ready-made template with your organization's name already filled in.
How to create a policy from a template
- Open Policies in the menu and click From template.
- Choose the Language of the policy.
- Optionally enter the Responsible role, the Review interval (for example every 12 months) and the Effective from date.
- Pick one of the 12 templates. Each shows the NIS2 Article 21(2) points and ISO 27001 Annex A codes it covers. Templates already used show the policy number, for example Used: P-3.
- Click Create draft. The new policy opens as a Draft.
Which templates there are
- Marked Core: information security, acceptable use, access control, incident response, and backup and recovery.
- Also available: supplier security, business continuity, cryptography, human resources security, asset management, change and patch management, and vulnerability management.
How to complete and publish it
The draft contains your organization's name and the values you entered. Parts in [square brackets] still need your input, such as a value you left empty. The policy shows how many gaps are left to complete.
- Click Edit policy and replace every part in brackets.
- Click Publish. Members are asked to read and confirm it as with any other policy, and later changes create a new version.
Word and PDF
- Word downloads the policy as a .docx file.
- Print / PDF opens a page you can print or save as PDF.
Tips
- How many policies you can create from templates depends on your package.
- Templates are a starting point, not legal advice. Adapt them to your organization and have them checked where needed.