Yes. Guidelines for creating an Information Security Policy and an Incident Response Plan are available on Ace Way of Retailing (AWOR). DilSe.IT can help you craft policies and procedures specific to your company.