Free Cybersecurity Templates

This document outlines GitHub's Private Information Removal Policy, detailing the process for requesting the removal of sensitive data from repositories. It defines what constitutes "private information" that poses a security risk and explains the steps involved in submitting and processing such removal requests. The policy also clarifies what types of content are not covered by this specific removal process.

This document is a Data Processing Agreement (DPA) template designed to supplement an underlying agreement between a Customer and a Provider. It outlines the terms for processing personal data, including the roles of Controller, Processor, and Subprocessor, and details security measures. The DPA also addresses restricted international data transfers under regulations like GDPR, UK GDPR, and CCPA, and provides procedures for security incidents and audits.

This document outlines the legal safe harbor terms for security researchers participating in the GitHub Bug Bounty Program. It assures researchers that GitHub will not pursue civil or criminal action for good faith policy violations and details how information is shared with affected third parties. The policy also provides a limited waiver for certain site policy restrictions to facilitate security research.

This document outlines the various cookies utilized by GitHub, detailing their purpose, the provider responsible for them, and their expiration periods. It serves to inform users about data collection practices and provides links to GitHub's Privacy Statement for further details on cookie usage and preference management.

This document is a GitLaw Subprocessor List, detailing the third-party entities authorized to process customer data, including personal data as defined under GDPR, on behalf of GitLaw. It applies to all GitLaw services governed by the GitLaw Data Protection Agreement. The list also outlines GitLaw's policy for notifying customers about new subprocessors at least 30 days in advance.

This policy outlines GitHub's stance on account recovery, especially for users who have enabled two-factor authentication. It clarifies that if automated recovery methods fail, access to the account is permanently lost, and GitHub Support will not restore access for security reasons. Users may still be able to unlink email addresses or access public content from a locked account.

This Data Processing Agreement (DPA) outlines the terms for processing personal data between a Customer and a Provider, supplementing an underlying agreement. It details responsibilities for data protection, security measures, the use of subprocessors, and compliance with various data protection laws such as GDPR, UK GDPR, and CCPA, particularly concerning international data transfers. The document includes key terms, security policies, liability caps, and procedures for security incidents and audits.

This document outlines GitLaw's policy and process for requesting the removal of private information from repositories. It defines what constitutes 'private information' for removal purposes, focusing on high-risk content like exposed access credentials or government identification numbers that pose a specific security threat. The policy details the steps for submitting a request, GitLaw's response, and the dispute resolution process.

This document outlines a Clean Desk Policy designed to enhance security and confidentiality within an organization. It mandates that all sensitive and confidential information, whether physical or digital, must be properly secured or disposed of when workstations are not in use. The policy aims to reduce the risk of unauthorized access, loss, or damage to information.