← TPN pack

Security Policy Templates

Ready-to-adopt written policies for MPA / TPN readiness, pre-filled with your studio name. The MPA Best Practices expect these in writing. Review, edit to your studio, and adopt - then they cover the policy controls in your assessment.

Information Security Management Policy

OR-1.0

Acceptable Use Policy

OR-1.1

Access Control Policy

TS-1.7

Incident Response Policy

OR-4.0

Data Classification & Handling Policy

OR-1.4

Business Continuity & Disaster Recovery Policy

OR-1.2 / OR-1.3

AI / Machine Learning Use Policy

OR-5.0

Vulnerability & Patch Management Policy

TS-4.0

Vulnerability & Patch Management Policy

MPA TS-4.0

Download .txt

Studio - Vulnerability & Patch Management Policy
Effective: 21 July 2026

1. Systems and dependencies are kept up to date; security patches are applied promptly.
2. Code is scanned for vulnerabilities before release (static analysis in CI).
3. Findings are triaged by severity and tracked to remediation.
4. Periodic security testing is performed and results actioned.