Baseline IT security rules covering passwords, multi-factor authentication, device hygiene, phishing, and incident reporting, ending with a signed employee acknowledgment. Use it to onboard anyone who touches company systems.
This policy sets the baseline information-security rules for everyone who uses the systems, accounts, and data of Company name (the "Company"). Following it protects clients, colleagues, and the Company itself. Your signature confirms that you have read it and agree to apply it in your daily work.
This policy applies to all employees and contractors, on every device used for work — Company-issued or personal — and to every Company system, account, and data set, wherever you work from.
Report any suspected security incident immediately — a lost or stolen device, a clicked phishing link, an unexpected MFA prompt, malware, or any sign that an account or data may be compromised. Fast, honest reporting is what limits damage; you will never face reprisal for reporting an incident in good faith, including one caused by your own mistake.
I, Employee full name, confirm that I have read and understood this IT security policy, and that I agree to follow it whenever I use Company systems, accounts, or data. I understand that I must report suspected incidents immediately.
Signature: ✍ Employee signature Date: Signature date
Highlighted fields are filled in when you customize and send this document on Diiirect.
Not legal advice
This template is provided for general informational purposes only and is not legal advice. Laws differ by jurisdiction and change over time — have a qualified professional review any document before you rely on it.
A structured ramp plan managers adapt per role: learning goals for the first month, ownership goals for the second, delivery goals for the third, with owners and checkpoints.
An anti-harassment and anti-discrimination policy defining prohibited conduct, the complaint procedure, investigations, and retaliation protection, ending in a signed acknowledgment. Use it to document that every hire has read the policy.
A candidate-facing consent form for background screening that sets out what the check may cover, how data is handled, and the candidate's rights. Use it before ordering any screening.
Personal-device policy with a security baseline, device-management consent, data separation rules, and off-boarding data removal, closed by a signed acknowledgment. Use it before granting work access on a personal phone or laptop.
A complete code of conduct covering respect, integrity, conflicts of interest, company assets, and reporting channels, with a signature confirming agreement to uphold it. Use it during onboarding for every new team member.
A disclosure form employees complete to report outside activities, financial interests, and family relationships that could conflict with their duties. Use it at onboarding and for periodic refreshes.