As part of applying for cybersecurity insurance or when completing a PCI assessment for credit card payments you will need to provide a copy of your cybersecurity policy. NIST has a quick start guide on cybersecurity for small businesses as well much more detailed guidance.
If you want a really simple cybersecurity policy you can implement with minimal effort Black Vest Tech has created a template you can use.
To implement this policy:
Get each employee to read and acknowledge the policy.
Schedule a monthly computer health check to keep software and operating systems up-to-date with the latest security patches.
Identify a cybersecurity professional you would contact if you have an incident like a ransomware attack or data breach.
Schedule annual regular cybersecurity training for employees. This can be as simple as free online training videos.
Schedule a monthly vulnerability scanning tool like: https://pentest-tools.com/network-vulnerability-scanning/network-security-scanner-online
Schedule an annual review of the cybersecurity policy to address evolving threats and industry best practices.
Contact Black Vest Tech for help creating a simple cybersecurity policy for your small business, startup or non-profit.