~3-page information security policy template on the management of changes and IT configurations.
 
This policy lays out cost-effective information security arrangements for managing and controlling changes to business processes and/or the supporting IT systems, networks, configurations etc., in order to minimise unacceptable information risks.
 
Supplied as an MS Word document, readily customised for your organisation's specific situation.