CSV for Excel
Asset and service inventory
Record an owner, purpose, support status and review date for each device, application or service. Replace the example row, then add your own entries.
Start with what you have
Free security tools and templates
Download practical worksheets for the everyday security work that falls to a small IT team. Each file has a related guide with prerequisites, examples, and ways to verify your work.
No account or upload required. These are manual worksheets, not automated scans or proof that a control is working.
Start here
Choose one task you can complete or safely test this week. The links below jump to a worksheet and its guide.
Know what you have and who can access it
Build a useful inventory and review the people, services, and sharing paths that need attention.
CSV for Excel
Administrator access review
Record roles, scope, justification, approval and the outcome of each review. Use identifiers appropriate for a restricted internal record.
CSV for Excel
External sharing review
Review intended recipients and alternate access paths. Record authorized, unauthorized and signed-out test outcomes after allowing for propagation.
CSV for Excel
Email sender and authentication inventory
List every legitimate sending service, including occasional invoices and campaigns. Record observed SPF, DKIM and DMARC alignment; do not paste private keys or message bodies.
Change, protect, and recover
Plan a scoped change, keep track of patch work, and record what a real restore test shows.
CSV for Excel
Security change and verification record
Plan one scoped change per row, including prerequisites, recovery, test expectations and actual results. An untested change is not a verified success.
CSV for Excel
Patch and exception tracker
Track affected systems, vendor advice, exposure, pilot results, installed-version verification and approved exceptions.
CSV for Excel
Encryption and recovery-access review
Track actual encryption state and whether authorized staff can retrieve recovery material. Record a protected location reference, never a recovery key.
CSV for Excel
Backup restoration test record
Agree recovery objectives, restore into a separate destination, and record actual data recovery and elapsed time. Keep originals intact.
Detect and rehearse
Give alerts an owner and practice how the team would respond before a real incident.
CSV for Excel
Log and alert review record
Give each log or alert a reviewer, response route and tested delivery path. Record a restricted evidence reference rather than copying raw logs.
Markdown for a text editor
Incident response worksheet
Open in a text editor or Markdown editor. Fill in roles and an out-of-band contact route, then run the clearly fictional account-compromise tabletop or email-outage discussion.
Markdown for a text editor
Security awareness session worksheet
Use the short facilitator agenda and clearly fictional payment-change example. Fill in your reporting route before the session.