There are multiple services nowadays that have the possibility to generate IT Policy, Procedure and control documents for companies. For this procedure, I would like to recommend the available results on Google Search. Personally, I would either recommend Metricstream or Secunia. Both companies have applications, documents, templates and everything you need to get the job done.