CAPABILITY
Policies, Procedures
& Training
Building a strong compliance and security foundation.
Who it’s for
Organisations starting from little or no security
documentation, who also need their people brought up to speed at the same time.
At a glance
Service overview
The right governance,
and the right
people to run it.
Strong security starts with the right governance and the right people. Our
Policy & Training Support service helps organisations establish practical policy frameworks while equipping staff with the knowledge and skills needed to
support security and compliance objectives. Whether you require ready-to-
use policy templates, fully customised documentation, or tailored training programmes, we deliver practical solutions aligned to your organisation’s environment, risks, and regulatory requirements.
Our approach
Flexible policy
development and
training services.
Effective security depends on both strong
governance and informed people, so the two are delivered together.
01
Policy pack (self-service)
A comprehensive set of ready-to-use policy templates aligned to recognised industry standards and compliance frameworks, enabling your team to quickly
implement essential governance documentation.
02
Remediation support
Tailored policies and procedures developed by our consultants to reflect your organisation’s operations, risks, technologies, and compliance obligations.
03
Custom training programmes
Assessment and refinement of existing documentation to ensure alignment with
PCI DSS, ISO/IEC 27001, and other relevant standards.
04
Policy review and alignment
Practical security and compliance training designed around your organisation’s
specific risks, technologies, and business objectives.
05
Role-based training
Targeted sessions for technical teams, management, and general staff, ensuring
each group understands its security and compliance responsibilities.
06
Security awareness
Engaging programmes that help build a strong security culture, reduce human-
related risk, and promote secure day-to-day behaviours.
07
Compliance education
Training focused on PCI DSS and other applicable frameworks, ensuring staff
understand both organisational requirements and their individual responsibilities.
Why Confide
Why organisations
bring both to us
We write the documentation and train the people who
have to live by it, so the two match. Both come from
assessment experience rather than a template library.
Qualified Security Assessor, certified by
the PCI Security Standards Council.
Documentation and behaviour match
The policies we write are the ones your people are
trained on.
Reduced risk
Fewer avoidable mistakes and better compliance outcomes.
A scalable framework
Governance and capability that hold as the
organisation grows.
Other services
Assurance across your whole programme.
-
Read More: Assessment & attestation
Assessment
Assessment & attestation
End-to-end support to achieve and validate PCI DSS compliance.
-
Read More: PCI DSS managed assurance
Programme
PCI DSS managed assurance
An ongoing programme that keeps you compliant between assessments.
-
Read More: Managed Vulnerability Scanning
Scanning
Managed Vulnerability Scanning
End-to-end vulnerability scanning to meet PCI DSS requirements.
-
Read More: Cardholder data scanning
Discovery
Cardholder data scanning
Identifying and reducing cardholder data risk.
-
Read More: Security consulting
ADVISORY
Security consulting
Expert guidance to strengthen your security posture.
Why Confide
Related reading.
Practical guidance from our assessors on what the Standard actually asks of you, written for New Zealand merchants and service providers.
Hosted checkout, iframe or direct post: what each does to your scope
Most organisations we assess have chosen their online payment integration for commercial…
Get the documentation
and the capability sorted.
Book a call with a Qualified Security Assessor. You will speak
to the person who would run your assessment, not an
account manager.