Information Security Policy
Top-level information security policy for Your Organization — the parent ISMS document that sets objectives, authority, and the broad control framework under which all other security policies live.
Read it now — the PDF opens either way.
Purpose
This is the top-level information security policy for Your Organization. It articulates the commitment of Your Organization's leadership to protecting the confidentiality, integrity, and availability of information entrusted to it, defines the security objectives that drive the Your Organization Information Security Management System (ISMS), and establishes the authority under which all subordinate security policies, standards, and procedures are issued.
Scope
This policy applies to all Your Organization information assets, in any form and at any location; to every workforce member, contractor, and third party that handles Your Organization information; and to every information system used to store, process, or transmit that information — on-premises, cloud, endpoint, and mobile.
10 more sections in the full template
Objectives · Leadership commitment · Governance · Policy framework · Risk management · Compliance · Training and awareness · Enforcement · Scope exceptions · Review cadence. Download the full document above, or open it in CMDash to fill in your organization name and effective date automatically.
Use this policy for real, not just on paper
“Open in CMDash” pre-selects the Information Security Policy template the first time you create a policy — your organization name and today’s date fill in automatically, and it lands as a DRAFT you can edit before publishing.