Skip to main content

Policy templates

Policy templates are pre-configured policies that detect common security scenarios. Templates provide a starting point that you can customize for your organization.

What are policy templates?​

Templates are created and maintained by Keep Aware to cover common security use cases:

  • Phishing and credential theft detection
  • Data loss prevention scenarios
  • Extension security controls
  • Acceptable use enforcement
  • Common threat patterns

Using templates accelerates policy deployment and ensures you're following security best practices.

Browsing templates​

To view available templates:

  1. Navigate to Policies in the console
  2. Click Create policy
  3. Select Review templates

The templates page shows:

  • Template name and description
  • Category (Threat Protection, DLP, etc.)
  • What the template detects
  • Recommended safeguard configuration

Creating a policy from a template​

  1. Navigate to the templates page
  2. Find the template you want to use
  3. Click on the template to preview its configuration
  4. Click Use template to create a new policy based on it
  5. Customize the policy as needed:
    • Modify the detection query
    • Adjust the safeguard
    • Change priority or severity
    • Assign to your profiles
  6. Click Save

The new policy is created as a copy of the template. Changes to the original template do not affect your policy.

Template categories​

Threat protection templates​

  • Phishing detection (credential pages, brand impersonation)
  • Malware and malicious site blocking
  • Social engineering detection
  • Credential theft prevention

Data loss prevention templates​

  • Sensitive file upload detection
  • PII detection in forms
  • Unauthorized sharing prevention
  • Cloud storage monitoring

Extension management templates​

  • Risky extension detection
  • Extension allowlist enforcement
  • New installation monitoring

Acceptable use templates​

  • Social media restrictions
  • Streaming site controls
  • Gaming site blocking
  • Category-based access policies

Best practices templates​

The Best Practices Feed is a curated collection of high-fidelity templates maintained by Keep Aware. When you subscribe a profile to the Best Practices Feed, all templates in the feed are automatically applied.

See Best Practices Feed for details on subscribing.

Customizing templates​

After creating a policy from a template, common customizations include:

Adjusting the detection​

  • Add or remove domains from the query
  • Include your own custom lists
  • Modify category filters

Changing the safeguard​

  • Use a different safeguard type
  • Customize the message
  • Add or remove action buttons

Setting priority and severity​

  • Increase priority for critical threats
  • Adjust severity for your risk model

Adding exceptions​

  • Exclude specific users or devices
  • Allow specific domains or URLs

Keep Aware managed templates​

Some templates are marked as Keep Aware Managed. These templates:

  • Are created and maintained by Keep Aware's security team
  • Receive updates as new threats emerge
  • Follow best practices for detection and response

When you create a policy from a managed template, your policy is a copy. Updates to the template do not automatically update your policy.

To get automatic updates, subscribe to the Best Practices Feed instead of creating individual policies from templates.

Template vs Best Practices Feed​

AspectIndividual TemplatesBest Practices Feed
UpdatesManual (copy at creation)Automatic
CustomizationFull controlLimited (managed by Keep Aware)
EffortCreate each policySubscribe once
Use caseCustom requirementsRapid deployment

Finding templates​

By category​

Filter templates by category to find relevant ones:

  • Threat Protection
  • Data Loss Prevention
  • Extension Management
  • Acceptable Use

Search templates by name or description to find specific scenarios.

By Best Practices​

Filter to show only templates in the Best Practices Feed.

Creating custom templates​

Custom template creation is available for enterprise deployments:

  1. Create a policy with your desired configuration
  2. Contact Keep Aware to add it as an organizational template
  3. The template becomes available for all users in your organization

This is useful for:

  • Standardizing policy configurations
  • Sharing policies across teams
  • Enforcing organizational security standards

Table of Contents