How the business chooses, sets up and manages cloud services such as Microsoft 365, Google Workspace, accounting and CRM software – supplier checks, admin accounts, multi-factor authentication, sharing settings, backups and leavers – with a secure configuration checklist.
IT & cyber security
Cloud Services Security Policy and Configuration Checklist
About this document
Most small businesses now keep their email, files and accounting in the cloud. The provider secures its platform, but the business is responsible for how it is set up and used – who has access, whether multi-factor authentication is on, what can be shared and whether data is backed up. This policy and checklist cover those responsibilities, which are also tested in Cyber Essentials.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
IT & cyber security
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
