Free tools
GRC templates and checklists you can use with a client today
Risk registers, audit checklists, questionnaires and continuity templates — written for vCISOs, MSPs and compliance consultants. Preview free; download the spreadsheet with your email.
IT Risk Register Template
Free IT and cyber risk register template with a 5×5 likelihood/impact scoring guide and 10 pre-written example risks. Download as CSV for Excel or Google Sheets.
OpenSOC 2 Readiness Checklist
Free SOC 2 readiness checklist organised by the Trust Services Criteria common criteria (CC1–CC9). Prepare a client for a Type 1 or Type 2 audit. Download as CSV.
OpenHIPAA Security Risk Assessment Checklist
Free HIPAA Security Rule risk assessment checklist covering administrative, physical and technical safeguards (45 CFR 164.308–164.316). For clinics, dental groups and their IT providers.
OpenVendor Security Questionnaire
Free vendor security assessment questionnaire with 40 questions across governance, access, data protection, operations, resilience and AI. Send to suppliers as a spreadsheet.
OpenISO 27001 Internal Audit Checklist
Free ISO/IEC 27001:2022 internal audit checklist covering the mandatory ISMS clauses 4–10, with the evidence an auditor will ask for. Download as CSV.
OpenIncident Response Tabletop Exercise Kit
Free incident response tabletop exercise kit: planning checklist, a staged ransomware scenario with discussion questions, and an after-action review template.
OpenBusiness Impact Analysis (BIA) Template
Free business impact analysis template to capture critical processes, impact over time, RTO, RPO, MTPD and dependencies. Includes interview questions. Download as CSV.
OpenInformation Security Policy Template (Outline)
Free information security policy template outline for small and mid-size organisations, aligned to common ISO 27001 and SOC 2 expectations. Section-by-section with drafting guidance.
OpenISO 42001 Readiness Checklist
Every ISO/IEC 42001:2023 Annex A control for AI governance gap assessments.
Open