Overstrand · South Africa

Content Meadowfield

We draft and refresh internal security policies so your rules match how people actually access systems, handle information, and respond when something goes wrong.

Request a policy consult See the flagship engagement

Bright consulting room overlooking quiet Overberg landscape with policy documents on the table

Consulting table with printed policy binders and notebooks in a bright South African office

Flagship work

Internal Security Policy Development

A full drafting engagement for organisations that need board-ready internal security policy suites — acceptable use, access control, data handling, and incident response — written in plain English.

Discovery with policy owners and operational leads
Drafts with version control and approval packs
Staff acknowledgement templates for rollout

Review scope & timeline

Related policy work

Assess gaps, refresh ageing documents, draft incident playbooks, or brief staff once the wording is approved.

Reviewer comparing policy documents at a desk with soft natural light

Policy Gap Assessment

A structured review of your current internal security documents against POPIA expectations, common audit questions, and day-to-day practice.

Updated policy folders arranged on a wooden desk beside a laptop

Policy Refresh & Alignment

Update ageing acceptable-use, access, and data-handling policies so they match your current systems, suppliers, and staff roles.

Team discussing an incident response checklist around a meeting table

Incident Response Policy Drafting

Define who decides, who communicates, and what evidence is kept when a security incident occurs — written for South African organisations.

Facilitator leading a small staff briefing in a bright meeting room

Staff Policy Briefings

Practical briefing sessions that walk teams through new internal security policies without jargon, so acknowledgement is informed rather than rushed.

How engagements usually run

We begin with how your organisation operates today, then write policies that named owners can defend. Visit the engagement page for the full sequence from discovery to publication.

View the engagement path

“The gap assessment listed which policies we could keep, which to merge, and which were missing for POPIA-related access questions.”

Johan van der Berg · IT Manager · Policy Gap Assessment

Guides from the field

Short notes on acceptable use, board packs, POPIA-aligned rules, and access control refresh signals.

Notebook with handwritten checklist next to a laptop on a clean desk

What Belongs in an Acceptable Use Policy

A practical checklist for South African employers writing rules for email, devices, and cloud accounts that staff will actually read.

Printed briefing pack and pen on a conference table before a meeting

Preparing a Board-Ready Security Policy Pack

How to present internal security policies to a board or EXCO so decisions stick beyond the meeting room.