Information Security Policy Template
I am Stuart Barker, a practitioner of over 20 years and also an ISO 27001 practitioner. I built the information security policy to be simple enough to be used by business but also to be comprehensive enough to suit the demands of information security professionals.
This information security policy is a high level policy it sets out what the information security management approach of the organisation is. It includes some key elements such as management and leadership buy in. As a stand alone document this document can be shared with third parties, with auditors, customers and clients alike.
It is designed to be part of an overall pack of policies. I understand that there may be policies in pack that aren’t specific or required by your organisation hence the ability to buy each policy individually.
I am so confident that it will work for you that if it doesn’t, I will give you your money back.
Information Security Policy Template Contents
The information security policy template meets the requirements of ISO 27001 and SOC 2. It comes with a handy and easy to follow guide on how to implement and deploy policies and it includes:
- Document Version Control
- Document Contents
- Purpose
- Scope
- Information Security Policy
- Principle
- Chief Executives Statement of Commitment
- Introduction
- Information Security Defined
- Information Security Objectives
- Information Security Policy Framework
- Information Security Roles and Responsibilities
- Monitoring
- Legal and Regulatory Obligations
- Policy Compliance
- Compliance Measurement
- Exceptions
- Non-Compliance
- Continual Improvement
The policy has appropriate ISO 27001 required document mark up for classification, version control, document owner and last reviewed. It forms part of the ISO 27001 Templates Toolkit.
Reviews

Meets the requirement of ISO 27001 Clause 5.2 Policy
The Information Security Template meets the requirements of ISO 27001 Clause 5.2 Policy. Specifically it addresses:
Top management shall establish an information security policy that:
ISO 27001 Clause 5.2a
is appropriate to the purpose of the organisation
ISO 27001 Clause 5.2b
includes information security objectives or provides the framework for setting information security objectives
ISO 27001 Clause 5.2c
includes a commitment to satisfy applicable requirements related to information security
ISO 27001 Clause 5.2d
includes a commitment to continual improvement of the information security management system
ISO 27001 Clause 5.2e
be available as documented information
ISO 27001 Clause 5.2f
be communicated within the organisation
ISO 27001 Clause 5.2g
be available to interested parties, as appropriate
Quick Look

Information Security Policy Template Walkthrough
Meet the team behind the ISO 27001 templates
Practitioners for over 20 years in Governance, Risk and Compliance. These are the ISO 27001 tools we use day in day out.
5 reviews for Information Security Policy Template