IT security policies your small business can adopt this week, not next year.
Plain-English, editable policy templates for businesses with 5 to 100 employees. Fill in the blue fields, read the guidance notes, and you're done. Includes a checklist of the controls cyber-insurers commonly ask about.
Get the Complete Bundle: $79Starter Kit: $29
Why this exists
- Your insurer, a big customer or an auditor asked: "Do you have written security policies?"
- Enterprise templates run to 40 pages of jargon, and hiring a consultant costs far more than $79.
- These templates are short and practical, with guidance written for an office manager or a one-person IT team.
Choose your package
Starter Kit
Acceptable Use, Password & MFA, Incident Response Plan, Backup & Recovery, Security Awareness Training, plus the Cyber-Insurance Readiness Checklist.
See what's insideBuy: $29Complete Bundle
All 10 policies, the insurance checklist and the IT asset inventory ($128 if bought separately).
See what's insideBuy: $79What you get in every policy
- Editable Word (.docx) that also opens in Google Docs and LibreOffice, plus a PDF copy
- Blue [BRACKETED] fields: Find & Replace your company name once and it updates everywhere
- Yellow guidance notes that explain each decision, which you then delete
- Ready-made tables: contacts, severity levels, backup schedules, vendor register, training log
- An approval and staff acknowledgment page, plus a revision history
- Instant download after checkout. No subscription and no account to create.
All 10 policy templates
Acceptable Use
Sets clear rules for how employees may use company devices, accounts, networks and data.
Password & MFA
Defines modern password rules and where multi-factor authentication is mandatory.
Incident Response Plan
A step-by-step plan for detecting, containing and recovering from security incidents, with contact lists and checklists.
Backup & Recovery
Defines what gets backed up, how often, how backups are protected from ransomware and how restores are tested.
Access Control
Covers least privilege, onboarding/offboarding, admin rights and periodic access reviews.
Remote Work & BYOD
Security rules for working from home, travelling and using personal phones or computers for work.
Vendor & Third-Party Risk
A lightweight process for vetting, contracting and reviewing vendors that touch your data or systems.
Data Classification & Handling
Four simple data categories with clear handling rules for storing, sharing and disposing of each.
Security Awareness Training
Training requirements, schedule, phishing simulations and record keeping that insurers ask about.
Email & Phishing
Email security settings, safe-handling rules and payment-verification steps to stop phishing and wire fraud.
Spreadsheets that do the tracking
Cyber-Insurance Readiness Checklist: 40 controls applications commonly ask about, with status, owner, evidence and an automatic readiness score. $19.
IT Asset Inventory: hardware and SaaS registers that flag unencrypted devices, missing EDR, expired support and apps without MFA. $19.
Frequently asked questions
Is this legal advice? Will it make me compliant?
No. These are templates for general information. They do not certify compliance with HIPAA, PCI DSS, SOC 2, NIST, CMMC or any other law or standard. Have qualified legal, insurance and IT advisors review your final policies.
Will this get me cyber insurance or lower my premium?
We can't promise that, and we're not affiliated with any insurer. The checklist covers controls that applications commonly ask about, so you can find gaps before renewal. Always answer your carrier's actual application truthfully.
What format are the files?
Policies come as editable Word (.docx) files with PDF copies. The checklist and inventory are Excel (.xlsx). They work in Microsoft 365, Google Docs/Sheets and LibreOffice.
How do I get my files?
Right after payment, Stripe sends you to your private download page. Bookmark it: the link works for 60 days and up to 20 downloads. Lost it? Email support@lovedigitalworks.com with your receipt details.
How long does customization take?
A typical policy takes under an hour once you know your basic setup (email provider, IT provider, backup tool). Find & Replace handles your company name everywhere at once.