Workplace Security Policy Document

WORKPLACE SECURITY POLICY DOCUMENT

This Workplace Security Policy Document (the "Policy") is made as of Effective Date: by and between Organization Name: with principal office at Organization Address: (hereinafter "Employer") and Acknowledging Party Name: with Title: and Address: (hereinafter "Employee/Representative").

RECITALS

WHEREAS, Employer maintains physical premises, information systems, and operational processes that require security controls to protect employees, assets, confidential information, and business operations; and

WHEREAS, Employer seeks to establish uniform requirements for access control, physical security, information protection, incident response, and the conduct of Employees and contractors while on Employer premises or operating on Employer systems; and

WHEREAS, Employee/Representative acknowledges receipt of this Policy and agrees to comply with its terms as a condition of employment, access, contract performance, or continued engagement.

NOW, THEREFORE, in consideration of the mutual covenants set forth below, the parties agree as follows:

1. Definitions

For purposes of this Policy, the following terms shall have the meanings set forth below. Terms not defined herein shall be given their ordinary meaning in the context of workplace and information security.

2. Scope and Applicability

This Policy applies to all employees, temporary staff, contractors, vendors, visitors and other authorized users who access Employer premises, networks, systems, or data (collectively "Covered Individuals"). The obligations herein apply to all locations, remote work arrangements, and third-party engagements where Employer information or assets are processed or stored.

3. Access Control

Access to facilities, systems, and information shall be granted on a least-privilege basis and only to individuals with a demonstrated business need. Access rights shall be provisioned, reviewed, and revoked by authorized personnel in accordance with Employer procedures.

Background checks required prior to access: Yes     Remote access permitted: Yes

4. Physical Security

Employer will maintain reasonable physical security measures to protect facilities and equipment including perimeter controls, entry screening, secure storage for sensitive materials, and visitor sign-in procedures. Access logs and video surveillance may be used for security and investigative purposes in accordance with applicable law.

5. Information Security and Data Protection

Employer requires appropriate technical and administrative controls to protect confidential and sensitive information. Controls must include, without limitation, encryption where warranted, access logging, password management, patch management, secure disposal, and role-based data access.

Encryption required for sensitive data at rest and in transit:

6. Incident Response and Reporting

All security incidents, suspected breaches, or policy violations must be reported immediately to the Employer's security contact. Employer will investigate incidents promptly, take appropriate corrective action, and notify affected parties as required by law.

7. Employee Obligations and Background Checks

Employees and contractors must comply with this Policy, complete required background checks, and submit to periodic investigations or screening where permitted by law. Unauthorized access, removal, or disclosure of Employer property or information is prohibited and may result in disciplinary action up to and including termination.

8. Training and Compliance

Employer will provide periodic security training and awareness programs. Covered Individuals must complete required training within specified timeframes and as a condition of continued access to Employer systems and facilities.

9. Contractors, Vendors and Visitors

Third parties accessing Employer premises or systems must comply with this Policy and execute appropriate confidentiality and security obligations. Employer reserves the right to require monitoring, escorts, and limited access for visitors and vendors.

10. Monitoring, Audit and Records

Employer may monitor use of its facilities and systems to the extent permitted by law. Audit logs, physical access records, and security documentation will be retained for periods necessary to support investigations, compliance, and legal obligations.

11. Enforcement, Violations and Sanctions

Violations of this Policy may result in administrative discipline, suspension of access, civil liability, and/or criminal prosecution where appropriate. Employer will apply sanctions consistently and in accordance with applicable employment and contract laws.

12. Notices

All notices, requests, consents and other communications required or permitted under this Policy shall be in writing and delivered to the addresses set forth below or to such other address as a party designates by written notice.

13. Amendments

This Policy may be amended by Employer in its discretion. Substantive amendments that expand obligations or materially change Covered Individuals’ responsibilities will be provided in writing and require acknowledgement by the Employee/Representative.

14. Waiver

No failure or delay by either party in exercising any right under this Policy shall constitute a waiver of that right. Any waiver must be in writing and signed by an authorized representative of the party granting the waiver.

15. Governing Law

This Policy shall be governed by and construed in accordance with the laws of the State of without regard to choice-of-law principles. Each party consents to the exclusive jurisdiction and venue of the courts located in that state for any disputes arising under this Policy.

16. Entire Agreement

This Policy, together with any referenced Employer procedures, constitutes the entire agreement between the parties with respect to workplace and information security and supersedes all prior agreements, understandings, and communications, whether written or oral, relating to such subject matter.

17. Severability

If any provision of this Policy is held to be invalid, illegal or unenforceable, the remaining provisions shall continue in full force and effect and shall be interpreted so as to give maximum effect to the intent of the parties.

18. Counterparts and Execution

This Policy may be executed in counterparts and delivered by electronic means. Signatures delivered electronically or by facsimile shall be valid and binding to the same extent as original signatures.

Sign Now