CyberSmithSECURE

Kits

Checklists and templates we use on real engagements. Each one takes a name and a business email, and arrives in your inbox.

310 documents
ISO 27001 Toolkit
ZIP · 40.8 MB
A complete ISO/IEC 27001:2022 documentation set, arranged the way the standard is: clauses 4 to 10 for the management system, then the four Annex A control families — organizational, people, physical and technological. Includes the implementation resources, policies, procedures and records an ISMS needs to reach certification.
Get the kit
65 documents
GDPR Compliance Toolkit
ZIP · 12.1 MB
Ten structured workstreams covering a GDPR programme end to end — preparation, roles and training, personal data mapping, privacy notices, data subject rights, controller and processor obligations, DPIAs, international transfers and personal data breach management.
Get the kit
74 documents
PCI DSS v4 Toolkit
ZIP · 10.1 MB
A complete PCI DSS v4 documentation set, arranged in three tiers: policies, then procedures and processes, then standard operating procedures. Includes a v4.0 gap analysis tool, scoping guidance, a roles and responsibilities matrix, and a PCI DSS to ISO 27001 clause mapping for organisations running both.
Get the kit
46 documents
HIPAA Policies, Procedures and Standards
ZIP · 3.9 MB
A HIPAA documentation set built around the Security Rule's own safeguard categories: a control-to-safeguard matrix, ten procedures covering risk analysis through to emergency access and disposal, and thirty standards spanning encryption, authentication, audit, patch management and breach notification.
Get the kit
83 documents
Business Continuity Toolkit
ZIP · 20.5 MB
An ISO 22301 business continuity management set following the standard's clauses 4 to 10, with the operational forms a continuity programme runs on — business impact analysis, recovery objective analysis, incident impact logs, response action logs and post-incident reports.
Get the kit
37 documents
ISO 42001 AI Management System Toolkit
ZIP · 8.6 MB
Editable policy templates for an AI management system aligned to ISO/IEC 42001 — AI policy, governance, scope, risk management, impact assessment, performance evaluation and continual improvement — alongside the ISMS procedures and supporting policy set they sit on.
Get the kit
30 programmes
IT Audit Programmes
ZIP · 2.9 MB
Thirty risk-based audit work programmes covering IT general controls, access management, application controls, data centre security, cloud computing, business continuity, disaster recovery, vendor management, data governance and segregation of duties.
Get the kit
16 checklists
Penetration Testing Checklists
ZIP · 775 KB
Sixteen assessment checklists covering the targets we test: web applications, Android, iOS, APIs, networks, Active Directory, thick clients, WiFi, SCADA and ATMs — plus red team test cases, firewall audit, malware analysis and vendor security assessment.
Get the kit