This template is a sample policy that can be used by small and mid-sized not-for-profits to create an IT Security Policy.  

As with any policy of this nature, the organization may wish to engage an IT security professional for assistance in developing a policy that is tailored to the organization’s size, complexity, risk profile and objectives