Skip to content
CyberAudit CyberAudit
 Request a proposal

Resources

Templates and checklists

Working tools we use ourselves, cleaned up and given away. No drip campaign, no sales sequence — one email if we publish something similar, and an unsubscribe link on it.

SBP ETGRM Readiness Checklist

Excel workbook · ~25 KB

44 assessment questions across the seven domains of the State Bank technology governance framework, plus the nine questions worth asking in the quarterly board review the framework requires. Scores itself.

Who it is for: Heads of Internal Audit, CISOs and Company Secretaries at SBP-supervised institutions.

Or download without giving an email. We would rather you had it.

ISO 27001:2022 Gap Assessment Workbook

Excel workbook · ~30 KB

Clause 4–10 coverage with 30 assessment questions, the full Annex A structure across all four themes, a Statement of Applicability tab that cannot disagree with your assessment, and a rating scale that distinguishes a policy from an operating control.

Who it is for: ISMS managers and internal auditors preparing for certification or transition from the 2013 version.

Or download without giving an email. We would rather you had it.

Why the ISO workbook leaves the control titles blank

ISO/IEC 27001:2022 is a copyrighted standard. Reproducing its 93 Annex A control titles in a free download would be a redistribution of licensed content — however routinely it is done elsewhere.

The workbook is pre-structured with the correct four themes and the correct control count in each, with every reference number laid out. Populate the titles from your own licensed copy. It takes about twenty minutes and keeps everyone on the right side of the licence.

If you do not hold a copy of the standard yet, buy one before starting an ISMS programme. An organisation implementing a standard nobody has read is a recurring and expensive pattern.

What we do with your email

We tell you if we publish something similar. That is the whole of it — perhaps four emails a year, with an unsubscribe link on every one. You are not entered into a sales sequence and nobody will telephone you.

If you would rather not, take the direct download link under each form. It works, and we mean it.

Before you start

  • Both workbooks calculate their own summaries. Fill the shaded columns; leave the rest alone.
  • Each has an example row showing the level of specificity that makes an assessment useful.
  • Neither is a compliance determination. They are preparation aids, and both say so on the first tab.
  • Rate honestly. A workbook that flatters you is worse than no workbook — you will act on it.

Want the assessment done independently?

Self-assessment is a good start and it is consistently over-scored. We evidence every rating and show precisely which criterion is unmet where we revise one down.

Request a proposal
Top