Skip to content

Resource Center

Policy Starter Kit

Short, practical IT and security policy documents for small businesses that need better controls without enterprise paperwork.

Open source source files

Browse online, download as PDF, adapt to your environment.

These starter documents cover the gaps that show up constantly in small business IT: AI use, mobile devices, company computers, passwords and MFA, vendor access, offboarding, and MSP transitions. They are intentionally plain-language so owners, managers, and employees can actually use them.

Starter documents

4 min readPolicy Starter Kit

AI Acceptable Use Policy

A practical policy for small businesses that want employees to use AI tools without leaking sensitive company, customer, or regulated data.

AIpolicydata protection
3 min readPolicy Starter Kit

Company Computer Use Policy

A plain-language policy for company laptops, desktops, software, local admin rights, updates, files, and everyday computer use.

endpointpolicycomputer use
3 min readPolicy Starter Kit

Employee Offboarding Access Checklist

A checklist for removing access when an employee, contractor, administrator, or vendor contact leaves.

offboardingaccess controlchecklist
3 min readPolicy Starter Kit

Mobile Device and BYOD Policy

A small-business policy for company phones, personal phones used for work, lost devices, MFA apps, and basic mobile security expectations.

mobileBYODpolicy
3 min readPolicy Starter Kit

MSP Transition Checklist

A practical checklist for businesses preparing to leave an MSP, recover ownership, or verify that a former provider no longer has access.

MSPvendor independencechecklist
3 min readPolicy Starter Kit

Password and MFA Policy

A modern password and multi-factor authentication policy for small businesses that want stronger account security without outdated password rules.

passwordsMFAidentity
3 min readPolicy Starter Kit

Vendor Access Policy

A policy for controlling MSP, contractor, software vendor, and support-provider access to business systems.

vendor accessMSPpolicy