IT security policy pack
Clear, short IT security policies written for your organisation — the documents customers, banks and auditors ask for.
- PriceFrom Rs 45,000
- Delivery8–18 working days
- Revisions2–3 rounds
Choose a package
Fixed prices in PKR. Not sure which fits? Ask for a custom plan.
Essentials
- 8 core policies
- Staff summary page
- Policy register
Already have one? Sign in
One-time payment
Standard
- 15 policies
- Incident response plan
- Staff summary page
- Policy register
- Mapping to ISO/IEC 27001 controls
Already have one? Sign in
One-time payment
Tailored
- Up to 22 policies
- Incident response plan
- Two workshops with your team
- Staff summary page
- Policy register
- Mapping to ISO/IEC 27001 controls
Already have one? Sign in
One-time payment
Compare packages
| Feature | Essentials | Standard | Tailored |
|---|---|---|---|
| Price | Rs 45,000 | Rs 90,000 | Rs 150,000 |
| Billing | One-time | One-time | One-time |
| Delivery | 8 working days | 12 working days | 18 working days |
| Revision rounds | 2 | 2 | 3 |
| 8 core policies | Included | — | — |
| Staff summary page | Included | Included | Included |
| Policy register | Included | Included | Included |
| 15 policies | — | Included | — |
| Incident response plan | — | Included | Included |
| Mapping to ISO/IEC 27001 controls | — | Included | Included |
| Up to 22 policies | — | — | Included |
| Two workshops with your team | — | — | Included |
Delivery times count working days from when we receive your brief. See our Service Delivery and Refund policies.
About this service
We don’t hand over a 200-page template. We interview you about how your organisation actually works, then write policies your staff can read and follow, aligned with ISO/IEC 27001 controls where that helps.
Typical policies include information security, acceptable use, access control, passwords and MFA, remote work and devices, data classification and handling, backup, supplier security and incident response.
How it works
Choose a package
Compare what each package includes, or ask for a custom plan with a written quote.
Pay securely
Pay with Raast QR, JazzCash or Easypaisa. You get a receipt straight away.
Send your brief
Share your goals, files and examples in your project workspace. The delivery time starts from here.
Review the delivery
We deliver in your account. Accept it, or ask for changes within the included revision rounds.
Done — files are yours
Once you accept, the project is complete and the final files stay in your account.
Questions about IT security policy pack
Will these policies make us compliant?
Policies are one part of compliance — the controls must also be in place and followed. We tell you where your practice doesn’t yet match the policy.
When does the delivery time start?
When we receive your brief, after payment. Delivery times count working days (Monday to Saturday). If we need something from you, the clock pauses until we have it.
How do revisions work?
Each package includes the revision rounds shown. When we deliver, you accept the work or request a revision from your project page. If you don’t respond within 7 days the delivery is accepted automatically — we remind you 2 days before.
What if none of the packages fit?
Scope a custom engagement. We’ll send a written quote with the scope, price, timeline and milestones. There’s no obligation — you only pay once you accept it.
How do I pay, and can I get a refund?
Pay securely with Raast QR, JazzCash or Easypaisa — you approve the payment in your own app and get a receipt straight away. If you cancel before work starts you get a full refund; after that, our Refund Policy explains how work in progress is handled.
Need something different?
Tell us what you need. We’ll reply with a written quote — scope, price, timeline and milestones — and you only pay once you accept it.
Related services
ISO/IEC 27001 readiness gap assessment
Find out how far you are from ISO/IEC 27001 certification, what’s missing, and the order to fix it in — before you pay for an audit.
Incident response plan & tabletop exercise
A written plan for what your team does in the first hours of a security incident — and a rehearsal so they know it works.