Templates & Guides
Resources
Templates, checklists, reference guides, and toolkits for security practitioners and leaders. Free to download.
Resources are actively being prepared for download. Sign up for the newsletter to be notified when each resource is released.
Templates
-
DOCX · PDF
Security Program Charter
A structured template for defining scope, mission, and governance for a new or evolving security program.
-
DOCX · MD
Incident Response Runbook
A customizable IR runbook covering detection, containment, eradication, recovery, and lessons learned.
-
XLSX
Vendor Security Evaluation
A weighted scoring template for evaluating security vendors across technical, compliance, and commercial criteria.
-
MD · DOCX
Security Architecture Decision Record
Document and communicate architecture decisions with context, options, and rationale.
Reference Guides
-
PDF
HIPAA Security Rule Quick Reference
The key technical and administrative safeguards under the HIPAA Security Rule, summarized for practitioners.
-
PDF
NIST 800-207 Zero Trust Checklist
A practitioner checklist mapping your environment against the NIST Zero Trust Architecture principles.
-
PDF · CSV
FortiBleed IOC Reference
Complete IOC list from the June 2026 FortiBleed campaign for SIEM and firewall rule import.
Security Metrics & Board Reporting
-
PPTX · PDF
Board Security Metrics Dashboard
A curated metric set and slide template for board-level security reporting.
-
XLSX
Monthly SecOps KPI Template
Track detection coverage, MTTD, MTTR, vulnerability age, and patch compliance.
Threat Modeling
-
PDF · DOCX
Healthcare Threat Model
A healthcare-specific threat model covering clinical workflows, medical devices, and PHI data flows.
-
DOCX
GenAI Risk Assessment Template
Assess risk for GenAI tool deployment including data handling, output controls, and access policy.
Detection Engineering
-
YML · MD
Detection Rule Template (Sigma)
A Sigma-compatible rule template with documentation fields for detection logic, tuning notes, and coverage mapping.
-
MD
SIEM Query Library
Common threat hunting and detection queries for FortiGate, Entra ID, and endpoint telemetry.
Incident Response
-
DOCX · PDF
Credential Compromise Playbook
Step-by-step response playbook for credential compromise events, including containment decision trees.
-
PDF
Ransomware IR Checklist
A rapid-response checklist for ransomware incidents from initial detection through recovery.
Governance
-
DOCX
Security Policy Template Pack
Core security policy templates: Acceptable Use, Data Classification, Incident Response, Vulnerability Management.
-
XLSX
Risk Register Template
Track security risks with likelihood, impact, inherent score, controls, and residual risk.
Vendor Evaluation
-
XLSX
CASB Evaluation Scorecard
Evaluate CASB solutions across inline inspection, DLP, UEBA, and healthcare compliance criteria.
-
XLSX
EDR Evaluation Criteria
A structured scoring framework for evaluating endpoint detection and response platforms.