Menu
No data was found
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Cyber Essentials requires more than technical controls — it requires documented policies that your team acknowledges and follows. Our policy pack gives you everything you need, written in plain English, ready to adopt, and aligned to the five Cyber Essentials controls.
The Cyber Essentials Policy Pack is a set of pre-written, WDYG-supplied policy documents covering the written requirements of the Cyber Essentials scheme. It includes acceptable use, password, home working, BYOD, and incident response policies.
If you're pursuing or renewing Cyber Essentials certification, you need documented policies in place. This pack removes the effort of writing them from scratch — we've done it for you.
Acceptable use policy, password policy, home working policy, BYOD (Bring Your Own Device) policy, and incident response policy — all aligned to the Cyber Essentials five-control framework.
Meets the written policy requirements of Cyber Essentials, saves significant time versus writing policies yourself, gives your team clear expectations around security, and provides documented evidence for auditors.
Step 1
Step 2
Step 3
Step 4
Step 5
They come ready to use, but we recommend personalising them with your business name, specific processes, and any unique circumstances. We can help with that.
If you’re using Usecure alongside this pack (as part of our Cyber Essentials bundle), policy acknowledgement is built in — staff sign off digitally and you have the audit trail.
They’re designed to be contractually enforceable when incorporated into employment contracts or staff handbooks. We recommend having your HR adviser confirm they fit your specific employment setup.
At least annually, or whenever there’s a significant change to your business. We’ll remind you at renewal time.
They support good data handling practices and are aligned to GDPR principles, but they’re primarily designed for Cyber Essentials compliance. For GDPR-specific policies, speak to us separately.
We can adapt the policies for your business. Get in touch and we’ll discuss what adjustments are needed.
Yes. When the Cyber Essentials scheme is updated, we review and update the policy pack accordingly. If you’re on our Cyber Essentials Pack, you’ll always have the current version.
Yes. The policies are applicable to both the self-assessed Cyber Essentials and the independently audited Cyber Essentials Plus.
Yes. The policies are written with modern, cloud-first businesses in mind and address cloud service usage, Microsoft 365, and remote access scenarios.
The policy pack is included as part of our Cyber Essentials Pack (Core and Complete). It’s not sold in isolation — it works best as part of the full bundle.
There is nothing more annoying than an IT glitch that stops you working efficiently. However, knowing you have access to immediate attention to the glitch and a solution to it, is very reassuring and that is provided by We Do Your IT. We have so appreciated the availability and response given by the team at We Do Your IT, enabling us to remain a productive firm.
Richard Sharp – Sharp Family Law