AI Governance Checklist
A practical checklist for AI inventory, data risk, human oversight, AI vendor controls, and executive reporting.
AI GovernanceChecklist
Open preview → Governance library
Resources and checklists
A practical resource center for cyber governance, privacy, AI risk, and customer trust workflows.
Open glossary Evidence pack Preview
- Scope and ownership clarity
- Risk register and decision rationale
- Policy/procedure evidence
- Vendor and customer trust records
Downloadable guides
Featured downloadable resources
DORA Readiness Checklist
A DORA readiness checklist for ICT risk management, incident reporting, resilience testing, and critical vendor controls.
DORAChecklist
Open preview → ISO 27001 Readiness Checklist
A static checklist for ISO 27001 scope, risk, policies, evidence, internal audit, and management review preparation.
ISO 27001Checklist
Open preview → Security Questionnaire Guide
A practical guide to managing customer security questionnaires through approved answers, evidence, and ownership.
Security QuestionnairesGuide
Open preview → Related insights
Related articles
How to report cybersecurity to the board: a decision-focused structure
Build a board cybersecurity report around material risk, trends, KRIs, overdue actions, incidents, vendor risk, assurance, and decisions required.
Read article →Does ISO 27001 require a CISO? Roles and accountability explained
Does ISO 27001 require the CISO job title? Understand leadership accountability, information security responsibilities, risk owners, control owners, and evidence roles.
Read article →How long does ISO 27001 take? A realistic readiness timeline
How long does ISO 27001 readiness take? Understand the factors driven by scope, current maturity, risk, evidence, internal audit, management review, and certification readiness.
Read article →How SaaS companies pass enterprise security reviews without sales fire drills
What should B2B SaaS companies keep ready for enterprise security reviews, vendor due diligence, and customer questionnaires—and how can they reduce sales blockers?
Read article →How to build a cyber risk register: fields, scoring, and examples
Learn how to build a cyber risk register with risk statements, business impact, likelihood, impact, owner, treatment, due date, residual risk, evidence, and acceptance.
Read article →How to build a vendor risk management program
A practical guide to building vendor risk management using inventory, risk tiering, due diligence, contracts, monitoring, evidence, exceptions, and accountable ownership.
Read article →