Company Procedures

Technology alone cannot protect a business. Written procedures make sure staff know what to do, apply security consistently, and leave a record that proves you comply.

Talk to us See pricing

Firewalls, passwords and malware protection only work if people use them properly. Clear, written procedures mean security does not depend on who happens to be in the office, and they give you evidence for UK GDPR and Cyber Essentials.

The right set depends on the size and type of your business. These are the ones we recommend most often.

Procedures we recommend

Starters and access

What each new person can reach from day one, and who authorises it.

Leavers

Accounts disabled, devices recovered and access removed the day someone leaves.

Subject access requests

How a request is logged, answered and recorded within the deadline.

Data breaches

Who decides, how quickly, and when the ICO must be told.

Devices

Encryption, lost devices and the use of personal phones for work.

Retention and deletion

How long each kind of data is kept and how it is deleted.

Labelled policies and procedures documents on a desk

Simple enough to be followed

A procedure nobody reads is not a procedure. We help you write short, practical procedures that fit how your business works, train staff on them, and create a clear audit trail without slowing down the day.

Questions we're asked

Do small businesses need written procedures?

UK GDPR expects you to be able to show how you protect personal data. Short written procedures are the simplest way to do that, whatever the size of the business.

Want this done for your business?

We put these controls in place for small and medium businesses, and keep them there. Tell us how your business works.

Get a fixed price