IT cybersecurity documentation

Clauric

A bit of a strange ask. My employers have asked me to research companies that sell ready-made IT and cybersecurity policies and documentation for SMEs.

I was able to find one (complianceforge.com) based out of Sheridan, Wyoming. However, I don't think that they would necessarily have the correct documents for an Irish/EU company. Every other search on Google came up with fill in the blank templates, or the policies and procedures for various organisations, which is not what I am looking for.

Are there any companies in Ireland that specialise in the provision of this kind of documentation?

horgan_p

Dirty secret time: most companies plagerise from someone else. Few enough of them will employ an outside agency to write documentation.

I've heard of companies lifting policy from UCC, The HSE (I know, I know) and the
GAA.


As regards companies that will write them for you, I would check out ISO consultants. Be sitting down when they tell you their daily rate.

Clauric

horgan_p wrote: »

As regards companies that will write them for you, I would check out ISO consultants. Be sitting down when they tell you their daily rate.

Work in a consultancy as well, as I can imagine the rates they charge.

horgan_p

horgan_p wrote: »

Dirty secret time: most companies plagerise from someone else. Few enough of them will employ an outside agency to write documentation.

I've heard of companies lifting policy from UCC, The HSE (I know, I know) and the
GAA.


As regards companies that will write them for you, I would check out ISO consultants. Be sitting down when they tell you their daily rate.

Jaysus, I wouldn't be lifting anything from the HSE. Never know what you would catch.

Clauric

Clauric wrote: »

Work in a consultancy as well, as I can imagine the rates they charge.

I sent you a PM.

D'Agger

Most will look to get a basic framework if documentation together - I had to do this for a prior company, I had no experience so reviewed University policies and as many free resources as I could

If I was a small company (as that was at the time) I would get the skeleton in place and then get the consultants in to help get you up to a particular standard

Half worried now that I've been part of a dark side of infosec but it's really what cut my teeth and got me into the sector