Policies are copied from somewhere else
The wording looks formal but does not describe your systems, responsibilities, approval paths or actual working practices.
Business IT governance
Turn agreed IT rules into policies people can follow.
Kritical prepares practical IT, IT operations and IT security policy foundations, then helps adapt them to the way your organisation works. These are operational templates and implementation support—not legal advice, employment-law advice, certification or a guarantee of regulatory compliance.
On this page
Choose where to start.
Jump to the part that matches the problem or decision in front of you.
Use the arrows or scroll to see every card.
This is for you if the rules exist only in people's heads.
A policy foundation is useful when technology decisions are being made repeatedly but the organisation has no consistent written position. The starting point may be a customer questionnaire, an internal audit, a staff change, a security review or simply the realisation that nobody can point to an approved rule.
HR and IT processes disagree
Joiners, movers, leavers, acceptable use, remote work and security responsibilities need one operational story.
A control exists but nobody knows the rule behind it
Technology settings have accumulated without an approved policy owner, review date or exception process.
Start with a coherent foundation, then tailor what matters.
The base engagement establishes a coordinated set of operational templates covering IT, IT operations and IT security. A tailored engagement adds workshops and drafting time for the policies most important to your organisation. The extended scope is agreed in writing, so a request for one policy does not silently become an unlimited compliance project.
Plain-language policy structure
Purpose, scope, ownership, responsibilities, exceptions, approval and review are visible rather than buried in generic legalistic text.
Operational connection
Approved rules are mapped to real processes such as access requests, staff changes, device use, incident handling and supplier management.
A controlled tailoring record
Assumptions, organisation-specific choices and unresolved specialist questions are recorded for the accountable owner to decide.
The boundary is explicit: operational support, not legal certification.
Kritical helps turn approved business requirements into usable policies and technical procedures. Your organisation remains responsible for approving its position. Legal, employment, privacy, regulatory and industry-specific requirements should be confirmed by appropriately qualified advisers where needed. We identify those dependencies rather than pretending a template settles them.
What the engagement can leave behind.
A scoped engagement can deliver a policy register, agreed templates, tailored policies, named owners, approval status, exception handling and a review schedule. Implementation support can connect the approved words to configuration, onboarding, staff guidance and evidence collection. Deliverables and review responsibilities are written into the quote before work starts.
Quoted on request, with the scope shown clearly.
Policy work is quoted against the foundation required, the number and complexity of tailored policies, stakeholder workshops, technical implementation and specialist review dependencies. Product prices remain in the Shop; this page makes no fixed-price or turnaround promise.
Start with the policies you need
Tell us what prompted the work and which policies are missing or outdated. We return a written scope.
Questions before you enquire
Are these policies legal advice?
No. They are operational templates and implementation support. Your legal, HR, privacy or regulatory advisers should review matters requiring specialist advice.
Can you tailor an existing policy set?
Yes. We first establish ownership, currency and the decisions already made, then scope the changes and technical implementation required.
Can you implement the approved policies?
Yes, where the implementation is within Kritical's technical scope. Configuration and operational work are quoted separately from policy drafting and specialist advice.
Does a policy pack certify compliance?
No. A policy pack does not certify compliance or guarantee a regulatory outcome. It provides a controlled foundation your accountable owners and advisers can review and operate.
Related services
IT management
IT management sits above the helpdesk and the project list.
IT governance
Kritical helps organisations define who can decide, who must approve, what evidence is required and how exceptions are handled across technology operations and change.
Managed IT
When something stops working, your team should know exactly where to turn and roughly when it'll be fixed.
Information governance
Make sensitive information easier to find, share and protect.
Essential Eight
If your Essential Eight position is unclear, Kritical turns the maturity model into a scoped technical baseline, visible gaps and a clear remediation sequence across the systems your organisation controls — assessed, not certified, and quoted.
Let’s define the next step.
Tell us what you want to achieve, what you have today and when it matters.