Exercise kit
Ransomware Tabletop Exercise Kit
Run a 90-minute exercise covering stolen administrator access, backup deletion, business disruption, and recovery decisions.
Get resourceResources
Security Resources
Practical resources for teams that need to improve security decisions, evidence quality, and operational readiness.
Policy kit
Employee AI Use Policy Starter Kit
Draft an AI use policy with concrete data rules, approval paths, output checks, and a fillable exception request.
Get resourceWorkbook
Supplier Access Review Workbook
Review SaaS integrations, MSP accounts, and vendor access with evidence requests, a worked decision, and a reusable approval record.
Get resourceWorkbook
Vulnerability Prioritization Worksheet
Turn a vulnerability alert into a documented patch, mitigation, isolation, or investigation decision with an owner and a retest.
Get resourceWorkbook
Cyber Risk Register and Board Brief
Write business-facing risk statements, record treatment decisions, and prepare a concise leadership brief without invented precision.
Get resourceEvidence kit
Cloud and SaaS Incident Evidence Checklist
Prepare collection authority, identify useful cloud and SaaS records, and document evidence exports without exposing secrets.
Get resource
Playbook
Help Desk Identity Verification Playbook
Define recovery checks, escalation rules, and practice calls for password resets and MFA changes without relying on caller familiarity.
Get resourceReview workbook
Container and Serverless Security Review
Review build provenance, deployment access, runtime permissions, secrets, and investigation coverage across containers and functions.
Get resourceWorkbook
NIST CSF 2.0 Action Workbook
Build a small, evidence-backed current and target profile, then turn selected gaps into an owned improvement backlog.
Get resourceEvidence kit
Security Evidence Readiness Kit
Build an evidence inventory and a repeatable validation record, with a dated explanation of lessons from FedRAMP 20x for small businesses.
Get resourceChecklist
Incident Response Readiness Checklist
A checklist for testing whether your company can make the first critical response decisions quickly.
Get resource
Guide
MFA Comparison Guide
A buyer-friendly guide for choosing better MFA controls without treating every method as equal.
Get resource
Matrix
Logging Coverage Matrix
A matrix for identifying which logs support detection, investigation, retention, and compliance needs.
Get resource
Template
Executive Cyber Incident Briefing Template
A structured template for briefing leadership without mixing facts, assumptions, decisions, and unknowns.
Get resourceChecklist
Okta and Entra ID Security Assessment Checklist
A checklist for reviewing identity controls across Okta and Microsoft Entra ID before misconfiguration becomes account takeover or privilege abuse.
Get resourceHow to use downloads
Pair the download with the system or decision it is meant to change.
These resources are designed to be used, not archived. Start with the preview, confirm it fits the current task, then hand it to the person who owns the next decision.