Assessment
Assessment scope canvas
Agree assets, roles, boundaries and the result you need.
Original / Editable
Download original ↓The resource library
Good work starts
with a useful structure.
Preview an original document, adapt it to your task and export a working copy.
18 ORIGINAL WORKING DOCUMENTS / EDITABLE MARKDOWN
Download the complete collection ↓18 original working documents
Governance
Risk decision record
Connect a specific scenario to a decision, owner and next check.
Original / Editable
Download original ↓Governance
Evidence index
Track where evidence came from and what it actually supports.
Original / Editable
Download original ↓Assessment
Remediation action sheet
Keep fixes tied to owners, dependencies and retest criteria.
Original / Editable
Download original ↓Governance
Vendor review brief
A bounded first review of a service provider and its dependencies.
Original / Editable
Download original ↓Cloud
Identity review worksheet
Trace privileged access from approval to revocation.
Original / Editable
Download original ↓Cloud
Cloud boundary canvas
Draw identity, data and network boundaries before selecting tools.
Original / Editable
Download original ↓Operations
Detection validation card
Describe the expected signal and record what the detection pipeline actually receives.
Original / Editable
Download original ↓Operations
Incident tabletop worksheet
Plan a fictional identity-compromise exercise with your team.
Original / Editable
Download original ↓AI security
AI action review canvas
Separate a model suggestion from permission to act.
Original / Editable
Download original ↓Governance
Policy ownership register
Give each policy a purpose, owner and approval lifecycle.
Original / Editable
Download original ↓Assessment
Security report QA checklist
Review scope, impact, evidence and remediation before handover.
Original / Editable
Download original ↓Engineering
Threat model working canvas
Connect assets, trust boundaries, assumptions and validation tasks.
Original / Editable
Download original ↓Engineering
Secure release decision record
Record what was checked, deferred and accepted for one software release.
Original / Editable
Download original ↓Training
Tabletop facilitator pack
Run a bounded exercise with roles, injects and an after-action record.
Original / Editable
Download original ↓Governance
Evidence sufficiency worksheet
Test whether an artifact supports a specific claim, period and boundary.
Original / Editable
Download original ↓Leadership
Security board brief
Translate evidence and uncertainty into decisions leaders can own.
Original / Editable
Download original ↓Training
Role-based learning plan
Design practice around decisions a role must make, not attendance alone.
Original / Editable
Download original ↓No match in this collection.
Try another term or clear the current filter.
Use, adapt, review.
These original documents are supplied under CC BY 4.0 with attribution. They are not copied framework requirements, complete policies, audit opinions or legal advice.