Cyber Insurance
Insurers ask about your policies, and the answers shape your premium and what you are covered for. Policies that match what you actually do keep your answers honest.
NEW SECURITY POLICY DEVELOPMENT
Security Policies Your Insurer, Auditor and Customers Will Accept.
Stop copying templates that don't match how you work. Answer a short online questionnaire and a senior security practitioner writes a policy set tailored to your business, sized to your team and mapped to the frameworks that matter in Australia.
- Written by a CISSP and CISM holder
- Essential Eight, ISO 27001, NIST CSF
- Privacy Act ready
WHY IT MATTERS
Sooner or Later, Someone Asks: “Can We See Your Security Policies?”
Bigger Customers and Tenders
Enterprise and government buyers send security questionnaires before they sign. A complete, current policy set gets you through them faster.
Audits and Compliance
Essential Eight uplift, ISO 27001 certification and Privacy Act obligations all start with documented, approved policies your team actually follows.
HOW IT WORKS
From Questionnaire to Approved Policies, Without the Months of Effort
-
Answer the questionnaire
Create a client account and answer plain-English questions about your business. It adapts as you go and only asks what applies to you.
-
We check the details with you
Anything you marked “Not sure” becomes a quick follow-up, so nothing in your policies is guessed.
-
A senior practitioner drafts your set
Every policy is tailored to your systems, sector and obligations, and written in plain language your staff will read.
-
Download from your portal
Track progress and download the finished documents in Word or PDF, ready to approve and roll out.
WHAT'S INCLUDED
The Right Set for Your Size, Not a 200-Page Binder
The questionnaire works out which set fits you. A small team gets a compact set; a business preparing for ISO 27001 gets every topic an auditor expects.
Essential
4 to 6 documents
A compact set for small teams, with technical topics as sections of the top-level policy.
Core
About 10 to 14 documents
The top-level policy, acceptable use, incident response, privacy, and the main technical and supplier topics.
Full
Usually 20 to 26 documents
Every relevant topic as its own document, including risk management and the policies an ISO 27001 audit expects.
- Information Security Policy
- Acceptable Use
- Access Control and MFA
- Incident Response
- Backup and Recovery
- Privacy and Data Breach Response
- Information Classification
- Supplier Security
- Remote Work and BYOD
- Patching and Vulnerabilities
- Business Continuity
- Risk Management
PRICING
Try One Free. Then Get the Full Set.
Free Acceptable Use Policy
$0
One per business
- 10-minute questionnaire
- Tailored to your devices, AI tools and ways of working
- Reviewed by a senior practitioner
- Emailed to you as a PDF
Most complete
Security Policy Pack
From $1,950 + GST
Final price depends on the set you need. Agreed before we start.
- Essential, Core or Full set, sized to your business
- Mapped to the Essential Eight, ISO 27001, NIST CSF or the ISM
- Privacy Act, state law and contract obligations checked
- Follow-ups settled with you before drafting
- Word or PDF, with your branding if you like
- Progress tracking and downloads in your client portal
QUESTIONS
Frequently Asked Questions
Are these just templates with our name on them?
No. Each policy is written from your answers: your systems, how your team works, your sector and your obligations. A senior practitioner reviews every document before you get it.
Why is the Acceptable Use Policy free?
So you can see the quality of our work before you spend anything. It is a complete, usable policy, and one most businesses need first. There is no obligation to buy the full pack.
How long does the questionnaire take?
About 10 minutes for the free policy and about 20 minutes for the full pack. Your progress is saved, so you can stop and come back. If you have done the free policy, we pre-fill what you already told us.
Which frameworks do you map to?
ISO/IEC 27001:2022, NIST CSF 2.0, the ASD Essential Eight, or the Information Security Manual (ISM) for Commonwealth supply chains. Not sure which fits? We will recommend one.
Can you help us put the policies into practice?
Yes. Cautio also provides vCISO and Essential Eight consulting, so we can help you roll the policies out, train staff and implement the controls behind them.
Start With One Policy. Free.
See how a tailored policy reads compared with a template. It takes about 10 minutes, and there is no credit card or obligation.
Subscribe Now
Stay updated