Policies and Procedures
Save time and have a good documentation reference
Download the Cybersecurity Kit.
COR - Organizational Coherence
🛡️ Information Security Policy
Protection of the organization's information, assets and reputation.
📄 Documents and Records Policy
Standards for managing the organization's documents and records.
⚠️ Risk Management Policy
Framework for identifying, assessing and treating risks.
⚖️ Compliance Management Policy
Ensuring compliance with legal and regulatory requirements.
CAP - Application Cybersecurity
CIP - Identity and Endpoint Cybersecurity
🔑 Access Management Policy
Control and management of access to information systems and resources.
🔒 Hardening Policy
Secure configuration and hardening of systems and applications.
CIF - Infrastructure Cybersecurity
🏢 Physical Security Policy
Physical protection of facilities, equipment and assets.
💻 IT Security Policy
Security standards for IT infrastructure and services.
📡 Communications Security Policy
Protection of communications and information transfers.
⚙️ ICS/OT Security Policy
Security of industrial control systems and operational technology.
☁️ Cloud Services Policy
Secure use and management of cloud and SaaS services.
💾 Backup and Recovery Policies
Backup and recovery of critical business information.
📊 Logging and Monitoring Policy
Event logging and security monitoring of systems.
THP - Human Talent and Vendor Security
👥 Human Resources Security Policy
Security across the employee lifecycle and personnel management.
🎓 Awareness Management Policy
Information security training and awareness program.
🤝 Vendor Management Policy
What the organization must ensure with its vendors, and its strategic purpose.
Human Resources Security Documents
🧲 Talent Acquisition Procedure
Candidate validation, security screening, hiring and access provisioning in the IdP.
✍️ Employee Clauses
Mandatory contractual clauses, including intellectual property and confidentiality.
📑 Terms and Conditions for Employees
T&Cs classified by Kudo's eight cybersecurity domains.
Awareness Documents
Vendor Procedure Documents
📋 Vendor Management Procedure
Inventory, classification, risks, purchasing committee, onboarding and external validation.
🛒 Purchase Request
Format and workflow for requesting the acquisition of goods or services.
📑 Terms and Conditions for Vendors
T&Cs classified by Kudo's eight cybersecurity domains.
✍️ Vendor Clauses
Mandatory contractual clauses, including intellectual property.
📄 Vendor Contract Template
Base contract structure for formally onboarding vendors.
CCN - Business Continuity and Change
🛟 Business Continuity Policy
Guidelines to ensure the continuity of critical functions during and after disruptions.
📋 Business Continuity Plan
Framework for responding to disruptive incidents affecting operations and ensuring essential functions.
🛠️ Change and Configuration Management Policy
Control of changes to IT systems and configurations.
🚨 Crisis Management Policy
Framework for responding to and managing organizational crisis situations.
📊 Business Impact Analysis (BIA) Procedure
Methodology for business continuity impact analysis (BIA).
📢 Communication Procedure and Plan
Communication strategy for incidents and crises.