Access Control Policy (ACP)
States employee access to a firm's information systems and data. Topics include NIST Access Control standards, network access controls, user access, operating system software controls, password complexity, monitoring methods, and access removal upon employee departure.
Acceptable Use Policy (AUP)
Specifies the restrictions and practices employees using organizational IT assets must adhere to. Standard onboarding policy — all new personnel read and sign before being granted network access.
Information Security Policy
High-level guidelines covering a large number of security controls, ensuring that all employees who use information technology assets comply with stated rules and guidelines.
Incident Response (IR) Policy
Describes the company's methodology for managing an incident and remediating its effects. The objective is to minimize damage to business operations and decrease recovery time and overall cost.
Remote Access Policy
Defines suitable methods of remotely connecting to company networks — required for organizations with dispersed networks or the ability to extend into insecure network locations.
Business Continuity Plan (BCP)
Coordinates actions to restore hardware, applications, and essential data. Every BCP is distinctive to the business and explains how a company will operate in an emergency.