Practical resources
Security governance tools you can put to work.
Inspect the way a repeatable security governance programme can work. Each resource is an educational starting point and must be adapted to a real organisation’s approved scope.
Operational guide
ISO 27001 surveillance and maintenance calendar
A practical month-by-month planning model. Includes a downloadable editable calendar.
Open the resource ↗Working template
Security questionnaire evidence register
Record each answer, its evidence, owner, reviewer, approved version and disclosure constraints.
Open the resource ↗Buying guide
Virtual CISO vs ISMS manager
A responsibility-by-responsibility comparison to avoid paying for the wrong kind of support.
Open the resource ↗Board pack
Sample monthly cyber governance report
An original illustrative one-page board reporting format using fictional data.
Open the resource ↗Ongoing ISMS management
ISO 27001 maintenance checklist
An operational review checklist with clear boundaries around independent audit and management responsibility.
Read the checklist ↗Talk through your programme
Scope a security governance function
Share the current owner, next external deadline and assurance workload without uploading confidential records.
Discuss your requirements ↗A workable next step
Useful templates are only the beginning.
A functioning management system needs assigned people, verified evidence and someone keeping the review cycle moving.