Pass security audits without writing policies from scratch.
180+ ready-to-use policies with 12 months of updates.
Upgrade for an exposure check and a ransomware tabletop.
Trusted by CEOs, CIOs & Compliance Officers
MSPs, SaaS companies, and enterprises rely on these templates for audit readiness.
500+ Organizations Served
Across healthcare, finance, technology, and government sectors.
4.8 / 5 Satisfaction Rating
Exceptional customer satisfaction ratings across all policy templates.
Written by certified IT auditors. Mapped to NIST, ISO 27001, HIPAA, PCI DSS, and more.
180+ documents with 12 months of updates
Renew updates for $250/year after the first year. Optional, and we tell you before it is due.
Silver plus an External Exposure Snapshot
Requires domain ownership verification and signed authorization. Report within 2 business days after both are in place. Not a penetration test.
Gold plus a ransomware tabletop exercise
Tabletop is scheduled after your Snapshot report is delivered, within 90 days of purchase.
Complete package with over 180 policies, procedures, plans, and forms to help you meet security and compliance requirements.
Aligned to COBIT, GDPR, HIPAA, ISO, NIST, PCI, and others (compliance matrix).
Collection covers network security, compliance, and risk management (complete list of documents).
4.8 out of 5. Rated by IT directors, CTOs, and compliance officers.
Every collection includes 12 months of updates. Optionally renew for only $250/year after that.
Once you make your purchase we will e-mail you a link to download the collection.
Fully customizable Word docs in an attractive, professional format.
Just insert your organization's name (sample policy).
Certified by the Information Systems Audit and Control Association.
No software to download or install. Simple Word documents you can use immediately.
No need to hire a security consultant. Save time and money.
Over 30 years of IT security and compliance audits. Altius IT has been featured in 40+ publications and nationwide media outlets.
All documents listed below are included with your purchase. Security Policy (listed under Security Governance) is the highest level policy document that provides overall security guidance and direction. Alternatively, the Cybersecurity Framework Policy can be used as your highest level policy document.
The Silver Collection includes over 180 information systems security policies, plans, and forms, plus 12 months of updates and any new documents created by our experts. The Gold Collection adds an External Exposure Snapshot reviewed by a certified auditor. The Platinum Collection adds a ransomware tabletop exercise, and its full purchase price is credited toward an Altius IT audit within 90 days. Every collection may renew updates for $250/year.
Each organization has different needs. We provide the best value by offering you a choice of options. Every collection includes 12 months of updates to existing documents as well as new policies created by our experts. Silver is the policy collection on its own. Gold adds an External Exposure Snapshot, a certified auditor's review of what your organization exposes to the internet. Platinum adds a ransomware tabletop exercise that tests your Incident Response Plan with your team, and credits its full purchase price toward an Altius IT audit within 90 days. In future years you have the option of keeping your collection up-to-date through our subscription service.
The Altius IT Policy Collection is a collection of IT policies, procedures, plans, and forms with an emphasis on security, privacy, and compliance. Each document has a consistent look and feel and is provided as a separate Microsoft Word file, giving you the flexibility of only rolling out the documents needed by your organization.
Yes. The Collection was developed by our experts after many years of performing security audits. It was designed to help organizations meet security best practices, security policy standards, and compliance requirements including HIPAA, NIST, ISO, PCI, GDPR, and many others.
We make available one sample policy for your review. All documents have the same attractive format and the content within each document is customized to a specific subject.
Unfortunately, no. The Collection was developed to help organizations meet security and compliance requirements. Even if you only need a few documents to start, you will likely need more policies, plans, and forms as you grow or when requested by clients and other entities. If you need specific documents written for your business, our auditors can create them for you.
Yes. Our CISA-certified auditors can create new policies, plans, and procedures for your organization, or customize the templates to fit your business, industry, and the frameworks you follow. This includes security and privacy policies, incident response plans, business continuity and disaster recovery plans, procedures, and acceptable use and vendor management documents. Each project is quoted separately. Request a quote to tell us what you need.
We require full payment at the time of purchase. We believe that the Altius IT Policy Collection will generate revenue for your organization by helping you acquire more clients and entities that are concerned about security and privacy.
Once we receive your payment, we will e-mail you instructions to download the Collection of security policy templates.
It depends on how frequently legislative changes are enacted and/or changes are made to security best practices. Typically we release two or three sets of updates per year. We do the work for you and will automatically notify you when updates are ready.
All three collections (Silver, Gold, and Platinum) include 12 months of updates. We e-mail you the updates as soon as they are available. After the first year you may renew updates for $250/year. Renewal is optional, and we tell you before it is due.
The External Exposure Snapshot, included with Gold and Platinum, is a passive, point-in-time check of what your organization exposes to the internet: email security (SPF, DKIM, and DMARC), your website and its TLS configuration, and exposed services. A certified auditor reviews the results and sends you a written summary of the top issues. It covers 1 primary domain and up to 4 public IP addresses. It is not a penetration test: we do not attempt to exploit, log in to, or disrupt any system.
Two things. First, proof that you own the domain, either by replying from an e-mail address on that domain or by adding a DNS TXT record we provide. Second, a signed authorization for the domain and IP addresses in scope. Please request your Snapshot within 60 days of purchase. Once both are in place, you receive your Snapshot report within 2 business days.
Included with Platinum, the tabletop is a 60-minute remote session in which a certified auditor walks your team through a scripted ransomware scenario using your own Incident Response Plan. It shows who does what, where the plan holds, and where it needs work. Afterward you receive a written after-action summary. The tabletop is scheduled after your Snapshot report is delivered, and it must be scheduled within 90 days of purchase.
The Collection is designed to be easy to use and implement. We offer limited support by e-mail as well as support on a retainer basis for organizations that need additional assistance.
Altius IT accepts most major credit and debit cards. Select our Silver, Gold, or Platinum collection to proceed.
Altius IT accepts payment by PayPal.
Contact us for instructions to acquire the Altius IT Policy Collection using your organization's Purchase Order.
Contact UsOrganizations outside of the United States may want to contact us for instructions to wire funds to our bank account.
Contact UsResellers. Please contact us via e-mail for information on our reseller program.
