Resources
Free checklists and templates from the Infosec Check practice, covering cyber insurance claim readiness, GRC programs, and regulatory applicability for regulated US businesses.
In short: these are the working documents we use inside real engagements, released free. They are written for owners and executives rather than security teams, they name the specific regulator or carrier expectation behind each item, and each one is requested with your work email so we can send a private link and follow up once if it would help.
An executive checklist for organizing security controls, supporting evidence, application records, policy documents, incident contacts, and response information before an application, renewal, incident, or claim review.
Get the checklistName, work email, and a short note about what you are working on. Company and phone are optional.
Every file is stored privately and delivered through a link generated for your request. Nothing is published on a public path, so nothing can be browsed or guessed.
No newsletter and no drip sequence. A senior operator may follow up once to offer a readiness review, and you can decline in the notes field.
Where to next
Working a renewal? Start with insurance consulting and 10 Reasons Cyber Insurance Claims Are Denied. Unsure which rules apply to you? See the regulatory applicability assessment or GRC and regulatory. Want plain-language training for your whole team? See Ante Up, the monthly cybersecurity class for everyone in business. Prefer to just talk? Contact us.
Yes. Every resource in this section is free. We ask for your name, work email, and a short note so we know where to send the private link and what you are working on.
Because the files are not published on a public path. Each download link is generated for one request, which keeps the files out of search results and lets us follow up usefully instead of guessing what you needed.
Yes. A link stays valid for seven days. You can request the same resource again any time and you will get the current revision.
No. There is no newsletter and no automated sequence. A senior operator may reply once to ask whether a readiness review would help.
Owners, CEOs, CFOs, and operations leaders at US small and mid-sized businesses in regulated industries, including healthcare under HIPAA, financial services and insurance under the FTC Safeguards Rule, accounting and tax firms, legal services, government contractors under CMMC and NIST 800-171, and retail under PCI DSS.
Yes, share the PDF freely inside your organization or with your broker. Share the page link rather than your download link, since download links are tied to a single request and expire.
Book a 30-minute working session or send us a note. We'll come prepared.
