Resources

AI governance checklist

A printable checklist for establishing AI governance: inventory, classification, policy, review gate and evidence, mapped to the EU AI Act and NIST AI RMF.

LLM deployment checklist

Pre-launch security checklist for LLM and agentic features: authority, retrieval isolation, output handling, limits and logging, aligned to the current OWASP LLM Top 10.

Cloud security baseline

A printable cloud security baseline covering identity, network, data, MITRE ATT&CK-aligned logging and CIS-benchmarked posture management.

Incident response checklist

Printable IR readiness checklist aligned to NIST SP 800-61r3: authority, playbooks, evidence access, communications and regulatory clocks.

Executive exposure checklist

Printable checklist to review executive and key-person OSINT exposure, including AI-assisted pretexting risk, before social engineering attempts.

Conditional Access checklist

Printable checklist for reviewing an Entra ID Conditional Access baseline, including authentication strengths, exclusions, break-glass accounts and legacy authentication.

DORA / NIS2 gap checklist

Printable gap checklist for organisations in scope of DORA, NIS2 or both — governance, inventory, incident-reporting clocks and third-party risk.

Tabletop facilitation guide

Printable facilitation guide for a 90-minute security tabletop exercise: preparation, injects, decision probes and follow-up.

Agent sandbox hardening

Printable checklist for bounding a local coding agent: profile checks, container flags, credential handling and proof that the boundary works.