The library of Rules/Policy documents is provided to you and your organization as a starting point or maturity checkpoint for existing rules/policies. It is brought to you on behalf of Jim McConnell, Principal Owner, and Ask McConnell, LLC — A Converged Security Services Provider. The content is not meant to cover every circumstance, industry, law, regulation, contractual requirement, threat, environment, or risk, but it provides an easy, defendable, highly accountable starting point for any organization. Please consult with your legal counsel and insurance provider about added requirements. If you know of peers who you think would find value in these resources, please have them contact us. These will be updated on our website regularly. We are not legally protecting these documents; we just ask for credit, shout-outs, and referrals if you find them helpful. If you have recommended updates, we are all ears. And if you need Converged Security Consulting and Training, please reach out, we would be honored to serve you and your organization.

Jim McConnell | info@askmcconnell.com | askmcconnell.com

Role Based Policy Implementation — What Roles Should Sign Up?

Below is a GUIDE for when someone asks, “Which Policies Apply to Which Roles”? This won’t fit every situation, organization, legal requirements, or culture, but use it to start the conversation internally. Some organizations may find all these policies are relevant to all their personnel, or that it is just easier to cover everything with everybody. Some may find that a subset of an individual policy relates to a particular role and make a carve-out policy. Lots of options and flexibility. The key is that at least one role is accountable for each policy. For a more advanced/larger organization with a strong HR compliance and policy management tool, this “Role Based Policy Implementation” approach can be much easier to get granular, as the table below demonstrates.

Updated: 15 May 2025 (converted to HTML 05 July 2026)

Topic	All Employees	Minimalist Access	Leadership	Finance/Cash/CC	Critical Infrastructure	IT Teams	Facilities	HR/PII	Security Team	Legal	Supervisors	Marketing/Sales	Procurement	Volunteers
Personnel Security	✓
Child and Youth Protection			✓				✓		✓					✓
Weapons and Security	✓													✓
Reporting Security Incidents, Vulnerabilities, Threats	✓													✓
Investigations	✓
Crisis Management and Communications			✓						✓	✓
Onsite/Offsite Events Security			✓						✓			✓
Partnerships with Law Enforcement			✓						✓	✓
Termination / Offboarding Personnel			✓					✓	✓		✓
Protecting VIPs (Physical)			✓						✓			✓
Insider Threat Management			✓			✓			✓		✓
Visitor (Invited / Non-Invited) Management	✓													✓
Vulnerability Management						✓	✓		✓
Physical Security							✓		✓					✓
Basic Safety	✓													✓
Emergency Evaluation/Shelter-In-Place	✓
Use of Our Facilities							✓		✓	✓		✓
Recruiting and Onboarding								✓			✓
Security Personnel Training								✓	✓
Warehouse Security (Worker Edition)		✓
Construction Site Security (Worker Edition)		✓
Fraud Management			✓	✓		✓
Supplier / Customer Care Diligence										✓		✓	✓
Asset Inventory Management	✓
Cyber Security – Center for Internet Security 18 Critical Controls	✓
User IDs / Login IDs – Cyber / Information Security	✓
Technology Software Updates						✓			✓
Supply Chain Security									✓	✓	✓		✓
Non-Public Information Security (Including PII)	✓													✓
Social Media Usage	✓													✓
Email Security	✓
Laptop/Desktop/Mobile Security	✓													✓
Secure Software Development						✓			✓
Retail Loss Prevention				✓			✓		✓			✓	✓
Handling of Cash or Checks				✓
Engaging Security for New Projects / New Events			✓	✓	✓	✓	✓	✓	✓	✓		✓	✓
Records Retention/Destruction	✓
Security Metrics	✓
Safety Metrics	✓

← Return to the One-Pager Library

🖶 To save or print this document, use your browser’s Print function (Ctrl+P / Cmd+P) and select “Save as PDF” if needed.