Skip to content

IT policies and procedures (SOPs)

A lot of IT risk comes from how things are done rather than from the technology itself. A leaver’s accounts stay open for months. An admin password is read out over the phone. Written procedures close those gaps.

I help you put the right ones in place, in proportion to the size of the business. That means procedures your staff can follow, policies that set out what’s expected, and a plan for when something goes wrong. The work can also cover change control, acceptable use and working from home. They’re written in plain English, kept short, and reviewed as the business changes.

They also make the business easier to run. New starters are set up the same way every time, and knowledge isn’t locked in one person’s head. When a customer, insurer or auditor asks how you handle data, the answer is already written down.

Procedures work best with a fractional CTO keeping them up to date as the business changes.

What it involves

  • Starters and leavers

    Step-by-step procedures for setting people up, changing their access when their role changes, and closing everything off on their last day.

  • Passwords and MFA

    Clear rules on passwords, multi-factor authentication and admin rights, and on how access is requested and reviewed.

  • Data handling and retention

    Where data should live, who can share it and how, how long it’s kept, and how it’s disposed of safely.

  • Incident response

    A short, practical plan for a suspected breach, ransomware or a lost device: who to call, what to switch off and what to record.

Questions about IT policies and procedures

We’re a small business. Do we really need written IT procedures?

Not a binder full of them. A handful of short procedures for the things that go wrong most often, such as leavers or what to do in an incident, removes a surprising amount of risk. I keep them in proportion to the size of the business.

Will our staff actually follow them?

They’re far more likely to if the procedures are short, written in plain English and match how the business already works. I write them with the people who’ll use them, and keep them somewhere staff can find them.

Can procedures help with insurance or customer questionnaires?

Yes. Cyber insurers and larger customers increasingly ask how you manage access, backups and incidents. With procedures in place, you can answer those questions accurately and quickly.

Related services

Available on site in DenbighshireConwyFlintshireWrexhamGwyneddAngleseyCheshire and remotely across the UK

Interested in IT policies and procedures?

Book a free discovery callCall 07763 795216