IT Policy templates

MikeHiow · 23 Jan 2012 at 09:48

Since taking on IT at my current employer, I've pretty much built everything IT from the ground up. I now need to put in to effect an IT policy.

I think using a template either to modify, or as a guide is a good idea, however most I've found seem to be a "de-branded" copy of someone else's policy rather than a template. Most referring to other policies regularly.

Has anyone written their IT policy that can offer some advice? Or information on templates, guides etc. that may help with the process?

sidethink · 23 Jan 2012 at 10:32

What are you trying to achieve? When sitting down to write policies in the past I always found it best to start with my desired goals - some statements in the form of bullet points that I could then address with specific language in the form of policy.

You probably need to have an initial discussion with your employer to agree the scope of IT policy and the general 'approach'.

Does your business need the highest levels of lock down and control or are you going for a more open approach?

Are you trying to write the policies to comply with any particular standard or best practice? ISO/ITIL etc. Or are they just to encourage reasonable behaviours?

I'd also advise involving HR in the development as ultimately they will be involved in applyign and enforcing policy.

MikeHiow · 23 Jan 2012 at 10:56

It mainly resolves around internet use. At the moment we do some light monitoring, and issues that arise are dealt with by means of a quick word asking someone not to do it again basically. Although, including more general stuff in the scope of the document would be good.

We do not need any level of lock down, but rather to reinforce what should be common sense for most people.

Saundie · 23 Jan 2012 at 12:05

Are you specifically interested in writing some sort of Acceptable Use Policy, or is this a more general, overall IT Policy? I'm not entirely sure which you're asking for, as you seem to be talking about both.

N31L777 · 27 Jan 2012 at 14:50

Sounds like you need to go along the Acceptable Usage Policy document road. Find an general template on google and modify as required would be my advice.