While businesses with fewer than five employees are not legally required to have a written policy, it is strongly recommended and often requested by clients, insurers or accreditation schemes