The required policies are selected through the online brief after purchase. The available business, security and compliance information, together with any existing policies or related documentation, can then be provided for review.

Each document is drafted, reviewed or refined according to the agreed scope and the information available. Existing documentation can be retained where appropriate and improved where changes are needed.

The completed policies are delivered electronically in an editable Word format, ready for internal review and use.

Existing documents can be reviewed where available, or new policies can be prepared from the information provided.

Generic policy templates can provide a useful starting point, but they often require significant work to reflect how an organisation actually operates and what its security or compliance requirements demand.

Unlike document download services, Cysnova policies are written and refined individually based on the information provided about the organisation, its requirements and existing documentation. This means the resulting documents are designed to be relevant to the organisation rather than simply providing a generic template to complete.

The result is usable documentation without the time and effort of developing each policy from scratch.

A set of completed cybersecurity and compliance policies in editable Word format, based on the selected pack and agreed requirements.

Depending on the organisation’s needs, the pack can include documents covering areas such as:

• Information Security
• Access Control
• Acceptable Use
• Incident Response
• Risk Management
• Business Continuity
• Supplier Security
• Data Protection
• Security Awareness
• Asset Management

The final selection is confirmed through the online brief.