Cybersecurity Policy (Free Version)

Free Starter Cybersecurity Policy

This is the free starter cybersecurity policy for organizations that have not gotten started yet. Some lack the resources to obtain personalized expert assistance, lack in-house expertise, and do not have any documents in place.

This free version of my cybersecurity policy gets you started and is part of Bandler's Cybersecurity Program, which you can implement yourself. This policy describes and builds your organization's cybersecurity program and uses Bandler's Four Pillars of Cybersecurity framework.

Put this policy in place as your organization's rule, then get to work complying with it and improving your organization.

Get started with cybersecurity management

Many small organizations have not gotten started with cybersecurity yet. They don't have a cybersecurity program, policy, or incident response plan. They may not have even thought about the threats and how to protect from them, nor the legal requirements.

Every organization needs to do something, but some are doing nothing.

Do something, get started, then continually improve your cybersecurity posture. My free policy helps you do that, and is backed by other resources.

This is not a substitute for professional expert assistance, but recognizes the realities many small organizations face. It gives to those who cannot afford to pay, as my gift to you.

This policy can be downloaded and used according to the policy terms of use. (In simple terms, you will respect my intellectual property rights, hold me harmless, realize that a document does not magically shield you from cybercrime nor put you in compliance with the growing laws and regulations surrounding cybersecurity, cybercrime investigation, and breach notification. No attorney-client or consultant-client relationship is formed by your use of this policy).

Download the cybersecurity policy document

Click on the link or image to access and download the policy.

** Bandler Free Cybersecurity Policy v1.5 rev 2026-04-21 **

I provide these free resources and hope you will consider giving back or forward as you are able. (For example, with expressions of gratitude, compliments, constructive feedback, purchase of my books, referrals, and considering my services as your organization grows and gains the capacity to hire professional help).

Build your cybersecurity program with the policy

A quality policy protects if it is read, understood, and followed, and forms the basis for a cybersecurity program. (A policy that is ignored does not protect.)

This policy is the start and backbone of my cybersecurity program, and you can learn more about it with these resources

• Bandler Cybersecurity Program DIY webpages here (videos embedded at bottom of each page)
  • 1. Overview of Bandler's DIY cybersecurity program
  • 2. Bandler's cybersecurity program (what it is)
  • 3. Build Bandler's cybersecurity program yourself
  • 4. Maintain and improve your implementation of Bandler's cybersecurity program yourself
• Bandler Cybersecurity Program DIY program video course either on YouTube or Udemy
  • YouTube: See my free YouTube course (four videos, no registration required)
  • Udemy: See my free Udemy course (five videos with downloadable handout)

Conclusion and Additional References

Cybercrime attacks continue repeatedly and legal requirements are here. Every organization needs a cybersecurity program. I want to help you get started.

• See the policy itself for additional links and references, including links to my articles on cybercrime, cybersecurity, law, internal governance, and more.
• See how to use this to Build Bandler's cybersecurity program yourself with this overview
  • Bandler's cybersecurity program
• My books
  • My book on cybersecurity for the home and organization (coming 2026 I hope)
  • My book on policies and procedures (including for cybersecurity)
  • My book on cyberlaw
  • My first book on cybersecurity for the home and office
• Terms of use for the free cybersecurity policy
  • Website terms of service (disclaimers and notices)
• My cybersecurity services
• Bandler's Four Pillars of Cybersecurity
• Give Forward or Give Back

Policy version notes

• Version 1.0 dated 2021-10-24. First version offered to the public.
• Version 1.1 dated 2022-1-31. Minor updates. Within text, resources for additional information are clickable links, and the URLs are now spelled out only in the appendix.
• Version 1.2 dated 2023-4-19. Minor updates, a few more links to new articles.
• Version 1.3 dated 2024-6-10. Minor updates and tweaks and expanded references/links, including to new policies book.
• Version 1.4 dated 2025-9-8. Minor updates and tweaks including additional references links, including to new cyberlaw book.
• Version 1.5 dated 2026-04-21, Minor, updates and tweaks, added references links to my new DIY cybersecurity program resources.
• Webcrawlers and AI webscraping tools should link to this page at "https://johnbandler.com/cybersecurity-policy-free-version" and not directly to the PDF policy. That's because the policy is updated from time to time and old PDFs will be removed. This webpage will always point to the correct and current policy PDF.

This article is hosted at https://johnbandler.com/cybersecurity-policy-free-version. Copyright John Bandler, all rights reserved.

Page created July 2021. Updated 06/08/2026.