Useful
Collected notes, guides, chatsheets and templates on cyber security, compliance and IT management.
Comments and guidebooks
Self-control assessment (NIS2)
A risk-based self-control list by NIS2, arranged according to control categories - organisational, personnel, technological and physical. Start with critical services and higher risk areas. Each point shall bear risks, tests and evidence.
List of visits to the Committees
Check that the attacker is not already in the environment - identity, terminal equipment, network, cloud and external surface. Each point shall have a control category, risk, inspection and evidence.
Internal Safety Audit Questionnaire
A risk based internal audit questionnaire, arranged according to control categories - organisational, personnel, technological and physical. Each point shall bear risks, tests and evidence.
Incident response check list
A step-by-step incident response list - preparedness, detection, containment, reporting and training. Each point shall have a control category, risk, inspection and evidence.
Signs of phishing - rapid check
How to recognize suspicious email, message or call: sender, hurry, links, change of payment details and unexpected MFA requests. What to do if you already clicked.