What core policies should every CSO in T&T have in place?

We’re trying to do a policy audit and figure out what we have, what we’re missing, and what we actually need. Right now we have our constitution and a basic financial policy and that’s about it. I’ve seen lists of all the policies an organisation should have and it’s completely overwhelming. For a small organisation of six people with limited capacity, what are the ones we absolutely cannot operate without? Where should we realistically start?