Logical Access Policy (and Procedures) Template

This policy details how your organization will govern internal access to electronically stored data and infrastructure, and governs both day to day users as well as sensitive or privileged users. The policy must include the concept of Least Privilege (or access based on "need to know"), as well as how access is provisioned, de-provisioned, and reviewed.

Commonly associated evidence:

• Logical Access Policy

• Logical Access Procedures

• Periodic Logical Access Review

• Role Access Management

Who needs a policy like this?

• All businesses

How to use the template:

• Click on the link above to access the template

  • If you are a Google Workplace organization, make a copy by going to File > Make a copy

  • If you are not a Google Workplace organization, download a copy by going to File > Download and selecting your preferred file type (available as DOCX, PDF, and more)

• Review and then remove instructional text

• Save in a centralized place

• Attach to evidence either through Integrations, Automated Collection, or direct upload

If you need help using the template, please let us know.