What's New in the 2026 SANS Cybersecurity Policy Templates

Cybersecurity policies are the foundation of any governance program, setting expectations for workforce behavior and establishing the rules that support compliance and risk management. But policies can quickly become outdated as new threats emerge, standards evolve, and regulators raise the bar. Each year, SANS, in partnership with the CRF, updates its library of cybersecurity policy templates to reflect current best practices and provide organizations with a trusted starting point for building and maintaining their policy frameworks.

In this webcast, SANS Senior Instructor James Tarala will walk through the 2026 updates to the SANS Cybersecurity Policy Templates. He will highlight the most significant changes across key policies, explain the rationale behind the updates, and share practical guidance on how organizations can adapt these policies to their own environments. The session will also touch on new policy areas added to address emerging technologies and governance challenges that organizations will face in the coming year.

Attendees will gain insight into how the 2026 templates align with current standards and regulatory expectations, how they can be customized to fit unique business needs, and why keeping policy documentation current is essential to effective cybersecurity governance. By the end of the session, participants will be equipped to refresh their own policy sets and ensure they remain aligned with both organizational priorities and industry requirements.

This Session is Ideal for the Following Professionals:

• Risk Management Professionals
• Governance, Risk, Compliance Professionals
• IT Auditors
• Directors of Security Compliance
• Information Assurance Management
   

Learning Objectives:

• Understand the 2026 updates to SANS Cybersecurity Policy Templates
• Evaluate new and emerging policy areas
• Apply updated policy templates effectively