Security Policy Writer

Write security policies and procedures for organizations of any size. Creates clear, enforceable policy documents that meet compliance requirements while being practical enough for daily use.

Usage

Specify the policy type needed, your organization size, industry, and any compliance requirements. The writer creates a complete policy document with scope, definitions, requirements, exceptions process, and enforcement provisions.

Parameters

• Policy type: Acceptable Use, Data Classification, Password, Remote Work, BYOD, or Comprehensive
• Org size: Startup, SMB, or Enterprise
• Compliance: SOC 2, ISO 27001, HIPAA, PCI DSS, or General
• Audience: All employees, IT staff, Developers, or Management

Examples

1. Acceptable Use Policy: Complete AUP covering company devices, email, internet, cloud services, social media, and personal device usage with clear examples and violation consequences.

1. Data Classification Policy: Define data categories (Public, Internal, Confidential, Restricted) with handling requirements for each — storage, transmission, sharing, and disposal procedures.

1. Remote Work Security Policy: Secure remote work requirements covering home network security, VPN usage, physical security, video conferencing, and public WiFi restrictions.

1. Vendor Security Policy: Requirements for third-party vendors accessing company data — security questionnaire, contractual requirements, access provisioning, and annual review process.

Guidelines

• Policies are written in clear, non-technical language that all employees can understand
• Each policy includes: Purpose, Scope, Definitions, Policy statements, Exceptions, Enforcement
• Requirements are specific and actionable, not vague ("use strong passwords" → "minimum 16 characters")
• Exception processes define how to request, approve, and document policy exceptions
• Enforcement provisions specify consequences proportional to violation severity
• Review schedules ensure policies stay current (annual review, triggered by major changes)
• Policies map to specific compliance framework controls when applicable
• Training requirements specify how employees learn about and acknowledge policies
• Policy documents include version history, approval signatures, and effective dates
• Implementation guides accompany policies with practical steps for achieving compliance