Information security policy checklist

Read the document carefully to make sure it meets your business needs. Remember that if you have any questions you can easily Ask a lawyer.

Send a copy of your Information Security Policy to your staff to read and ensure they understand all aspects of the policy.

Make the Information Security Policy available to staff by, for example: 

• including it in induction packs

• providing it in hard copy

• sending it out by email

• putting it on notice boards, an intranet site or other easily accessible computer systems

The Information Security Policy is not a contract and does not need to be signed or agreed to by your staff. You can ask staff members to sign an acknowledgement to show that they received it, but it’s not legally required.

A copy of your Information Security Policy will be stored automatically in your Rocket Lawyer account ‘Dashboard’. 

You should also download and keep a copy of your Information Security Policy for your records.

Staff should also keep a copy of the policy or have easy access to it via a staff intranet or handbook.