Template

Access-control policy

A proportionate baseline to tailor, instead of starting from a blank page.

What’s inside

Who can access what, and with which privileges, sits under almost every incident. This template gives a solid structure to calibrate to your context.

What’s inside

  • The principles: least privilege and need-to-know.
  • Identity management, MFA and privileged accounts.
  • Provisioning, deprovisioning, periodic review and third-party access.
All resources

Download

Get the template.

Leave your name and email: you can download the PDF right after submitting. No automatic follow-up — marketing consent is separate and optional.

Fields marked with * are required. We use your data only to respond to your request, on a pre-contractual basis. Marketing consent is separate and optional.