Security Awareness Policy Starter

Best For

• ▸Businesses that want security training expectations codified
• ▸Organizations preparing for insurance that asks about training
• ▸Companies that want staff held to security expectations
• ▸Businesses that want a documented awareness program

What Is Included

• ✓Security awareness policy draft
• ✓Training requirement definition
• ✓Phishing and password practice expectations
• ✓Security incident reporting responsibilities
• ✓Awareness program documentation
• ✓Policy adoption guidance

What You Get

• →A documented security awareness policy
• →Clear training expectations for staff
• →A codified awareness program
• →Documentation for insurance and compliance

What Is Not Included

• —Hardware, licenses, subscriptions, permits, or third-party service fees unless explicitly included
• —Major remediation beyond the purchased scope
• —Emergency after-hours response unless the emergency product is purchased
• —Legal, tax, insurance, or regulatory advice
• —Credential collection through public forms

Customer Prerequisites

• ⓘAuthorized decision maker approval
• ⓘA contact person who can answer business and technical questions
• ⓘSafe access coordination when admin work is required
• ⓘPermission to document findings and recommendations

Questions We Will Ask

To get started, we will ask about:

• Business name*

  Legal or public-facing business name.

• Primary contact name*

  Main person Maine Cyber Tech should coordinate with.

• Primary contact email*

  Used for scheduling, service updates, and deliverables.

• Best phone number

  Useful for urgent, onsite, or access-sensitive work.

+9 more questions