Templates
Practical, branded Excel templates built from real assessments, ready for your next audit or supplier review.
Audit & Certification
Plan and run ISO/IEC 27001:2022 internal audits end to end: clauses 4 to 10, all 93 Annex A controls, findings and corrective actions, with a live dashboard.
Third-Party & Supplier Risk
A weighted supplier security questionnaire with 60 questions across 17 domains, including AI usage, with automatic scoring, inherent risk tiering and an onboarding recommendation.
US Defense · CMMC 2.0
Self-assess against the official CMMC 2.0 requirements: 15 for Level 1 and all 110 NIST SP 800-171 Rev 2 requirements for Level 2, with automatic SPRS scoring and POA&M eligibility.
Risk Assessment · NIST SP 800-30
Identify, analyse and treat cyber risks with the NIST SP 800-30 method, a 5x5 matrix, a 25-risk starter library, a live heat map and treatment mapped to NIST SP 800-53.
Yes. Download them and use them within your organisation at no cost. Please don’t resell or redistribute them as your own.
They are built for Microsoft Excel 2016 or later, including Microsoft 365 and Excel for the web. Google Sheets and LibreOffice can open them, but some formatting, charts and protection may behave differently.
The Introduction tab holds the guidance and branding, so it is protected and the tab structure is locked. Every working tab stays fully editable, so you can add rows, change weights and tailor the content.
Yes. I build custom audit programs, supplier questionnaires and control libraries mapped to the ISM, PSPF, NIST SP 800-53, NIST SP 800-171 and CMMC, ISO 27001 or ISO 42001. Talk to the AI agent to scope it.
Custom audit programs, supplier questionnaires and control libraries mapped to the ISM, PSPF, NIST SP 800-53, ISO 27001 or ISO 42001.