ECA cyber security policy template

ECA has produced a policy template for smaller businesses on cyber security. The document, which draws on the principles of Cyber Essentials, has been produced in response to the recent addition of several cyber security questions in the industry prequalification Common Assessment Standard (CAS).

The template, which can be amended to suit particular business needs, refers to measures such as:

• designing information (IT system and network) security into the business;
• adopting a proactive approach to IT security management;
• acting in a timely and cooperative manner to prevent, detect and respond to any IT security incidents; and
• reviewing and assessing the security risk with regard to information - and acting on the conclusions.

According to ECA’s Paul Reeve “As part of a recent update, the CAS asks several questions on Information Security and GDPR, including “Do you have a cyber security policy?” The new template has been produced to help smaller businesses engage with this and the other cyber security questions. It draws on measures advocated in Cyber Essentials which can help smaller businesses to manage - and show they are managing - cyber security issues”.

View the new Cyber security policy template here

This article was originally published on the ECA website on 26 July 2023.

--ECA

[edit] Related articles on Designing Buildings

• Cyber security.
• Cyber hygiene.
• Cyber resilience.
• Cyber security and engineering
• Cyber threats to building automation and control systems
• Cyber-physical system
• Cyber-security and phishing.
• Cyber security specialist.
• Infrastructure and cyber attacks
• Mitigating online risk.