V3.1Cloud Security
Cloud Access Hardening Guide
Practical identity, privilege, logging, and break-glass controls for modern cloud estates.
iamcloudprivilege
Updated
Aug 21, 2026$64
Aug 21, 2026$64
Protocol finder
Find the guidance for the situation.
Search by incident, technology, control, or outcome. Related security terms and minor spelling mistakes are matched automatically.
Try
60 documents found
V2.3Incident Response
Ransomware Response Protocol
A decisive first-24-hours playbook for containment, evidence preservation, and coordinated recovery.
ransomwarecontainmentforensics
Updated
Aug 14, 2026$89
Aug 14, 2026$89
V2.6Third-Party Risk
Vendor Security Review Kit
A repeatable assessment protocol with evidence requests, decision thresholds, and escalation paths.
vendorsassessmentevidence
Updated
Aug 04, 2026$59
Aug 04, 2026$59
V1.0Identity & Access
Access Review Campaign Toolkit
A reusable toolkit for scoping, running, escalating, and evidencing periodic user and privileged-access certifications.
access-reviewcertificationidentity
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Application Security
API Security Review Checklist
A focused checklist for reviewing API authentication, authorization, validation, abuse resistance, secrets, logging, and data exposure.
apiapplication-securityauthorization
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Application Security
Application Threat Modeling Workshop Kit
A facilitation kit for mapping trust boundaries, identifying credible threats, selecting controls, and recording design decisions.
threat-modelingdesignapplication-security
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Vulnerability & Exposure
Asset Criticality Classification Standard
A lightweight standard for classifying technology assets by business impact, data sensitivity, exposure, and recovery dependency.
assetscriticalityrisk
Updated
Sep 05, 2026$49
Sep 05, 2026$49
V1.0Resilience & Recovery
Backup Security & Recovery Standard
A security standard for resilient backups covering isolation, access, immutability, monitoring, restoration testing, and evidence.
backuprecoveryransomware
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Governance, Risk & Compliance
Board Cyber Risk Reporting Pack
A board-ready reporting pack for communicating material cyber risks, resilience, incidents, investments, decisions, and trend indicators.
boardreportingrisk
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Incident Response
Business Email Compromise Response Protocol
A coordinated response protocol for mailbox takeover, payment diversion, fraudulent instructions, and related identity compromise.
becemailfraud
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Security Operations
Case Management & Evidence Standard
A documentation standard for security investigations covering chronology, evidence integrity, decisions, access, retention, and closure.
case-managementevidenceinvestigation
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Cloud Security
Cloud Key & Secrets Rotation Protocol
A controlled protocol for rotating exposed or aging cloud keys, application secrets, certificates, and machine credentials.
cloudsecretskeys
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V2.0Cloud Security
Cloud Logging & Detection Baseline
A provider-neutral baseline for collecting the events needed to investigate identity and control-plane attacks.
loggingdetectiontelemetry
Updated
Jun 19, 2026$64
Jun 19, 2026$64
V1.0Cloud Security
Cloud Workload Incident Response Playbook
A response playbook for compromised cloud workloads, containers, serverless functions, and supporting control-plane services.
cloudincident-responseworkloads
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Governance, Risk & Compliance
Control Evidence Collection Standard
A repeatable standard for defining, collecting, reviewing, protecting, and retaining evidence that security controls operate effectively.
controlsevidenceaudit
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Resilience & Recovery
Critical Service Continuity Runbook
An actionable runbook for sustaining priority services during cyber disruption through dependencies, workarounds, communications, and restoration gates.
continuitycritical-servicesrecovery
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Third-Party Risk
Critical Supplier Incident Coordination Plan
A joint operating plan for managing security incidents that originate with or materially affect a critical supplier.
suppliersincident-responsecoordination
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Resilience & Recovery
Cyber Crisis Management Plan
An executive and operational plan for leading a cyber crisis through clear authority, shared priorities, communications, and recovery decisions.
crisisleadershipcommunications
Updated
Sep 05, 2026$89
Sep 05, 2026$89
V1.0Governance, Risk & Compliance
Cybersecurity Risk Assessment Methodology
A consistent methodology for describing cyber scenarios, estimating likelihood and impact, evaluating controls, and prioritizing treatment.
risk-assessmentgovernancecontrols
Updated
Sep 05, 2026$89
Sep 05, 2026$89
V1.0Incident Response
Data Breach Triage & Escalation Playbook
A structured first-response guide for validating a suspected data breach, setting severity, and escalating to the right decision-makers.
data-breachtriageescalation
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Data Protection & Privacy
Data Classification & Handling Standard
A usable classification standard that connects sensitivity levels to storage, access, transmission, sharing, retention, and disposal controls.
data-classificationhandlingprivacy
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Data Protection & Privacy
Data Retention & Deletion Protocol
A defensible protocol for translating legal and business requirements into retention schedules, deletion workflows, and verifiable evidence.
retentiondeletionprivacy
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Incident Response
DDoS Response & Service Continuity Runbook
An operator runbook for recognizing denial-of-service attacks, coordinating mitigation, and protecting critical customer services.
ddosavailabilitynetwork
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Security Operations
Detection Engineering Lifecycle Guide
A lifecycle guide for proposing, building, testing, deploying, tuning, measuring, and retiring security detections.
detection-engineeringsiemtesting
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Resilience & Recovery
Disaster Recovery Exercise Toolkit
A facilitation toolkit for designing, running, observing, and improving disaster-recovery tabletop and technical exercises.
disaster-recoveryexercisetesting
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Vulnerability & Exposure
Emergency Patching Protocol
A fast but controlled protocol for evaluating, testing, approving, deploying, and verifying emergency security patches.
patchingemergencyvulnerability
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Data Protection & Privacy
Encryption & Key Management Standard
A control standard for encryption decisions, algorithm selection, key custody, rotation, recovery, monitoring, and retirement.
encryptionkeyscryptography
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Governance, Risk & Compliance
Exception & Risk Acceptance Protocol
A concise protocol for evaluating control exceptions, documenting residual risk, assigning accountability, and enforcing expiration and review.
exceptionsrisk-acceptancegovernance
Updated
Sep 05, 2026$49
Sep 05, 2026$49
V1.0Vulnerability & Exposure
External Attack Surface Review Guide
A repeatable guide for discovering internet-facing assets, validating ownership, prioritizing exposures, and tracking risk reduction.
attack-surfaceexposureassets
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Third-Party Risk
Fourth-Party Risk Mapping Guide
A repeatable method for identifying material subcontractors, concentration risks, and hidden dependencies in critical services.
fourth-partysuppliersconcentration
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Identity & Access
Identity Provider Recovery Runbook
A recovery runbook for identity-provider outages or compromise, including emergency access and safe restoration of trust.
identityrecoverysso
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Incident Response
Insider Threat Investigation Guide
A careful investigation framework for suspected malicious, negligent, or compromised insider activity while preserving evidence and fairness.
insider-threatinvestigationevidence
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Identity & Access
Joiner-Mover-Leaver Access Protocol
A cross-functional protocol for granting, changing, reviewing, and revoking workforce access throughout the employment lifecycle.
jmlidentityaccess
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Cloud Security
Kubernetes Security Hardening Standard
A practical Kubernetes baseline covering cluster access, workload isolation, admission controls, secrets, images, and audit telemetry.
kubernetescontainershardening
Updated
Sep 05, 2026$89
Sep 05, 2026$89
V1.0Identity & Access
MFA Deployment & Exception Standard
A deployment standard for phishing-resistant MFA, coverage priorities, enrollment controls, recovery, and tightly governed exceptions.
mfaauthenticationexceptions
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Cloud Security
Multi-Cloud Configuration Review Checklist
A provider-neutral checklist for finding high-impact identity, network, storage, encryption, and logging weaknesses across cloud environments.
cloudconfigurationassessment
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Vulnerability & Exposure
Penetration Test Finding Triage Kit
A decision kit for validating penetration-test findings, assigning business context, prioritizing fixes, and confirming closure.
penetration-testingfindingstriage
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Data Protection & Privacy
Personal Data Breach Response Guide
A coordinated response guide for assessing personal-data exposure, preserving facts, making notification decisions, and tracking remediation.
privacypersonal-databreach
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Data Protection & Privacy
Privacy Impact Assessment Toolkit
A practical toolkit for screening initiatives, mapping personal data, assessing privacy risk, selecting mitigations, and recording approval.
privacypiaassessment
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Identity & Access
Privileged Access Management Implementation Guide
A phased implementation guide for inventorying privileged access, reducing standing privilege, and deploying controlled elevation.
pamprivilegeidentity
Updated
Sep 05, 2026$89
Sep 05, 2026$89
V1.0Application Security
Production Release Security Gate
A proportionate release gate for confirming critical security evidence, unresolved risk, approvals, rollback readiness, and accountability.
releasesecurity-gatechange
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Resilience & Recovery
Ransomware Recovery Validation Checklist
A recovery checklist for validating clean infrastructure, trustworthy identities, safe data restoration, monitoring, and business acceptance.
ransomwarerecoveryvalidation
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.5Third-Party Risk
SaaS Vendor Offboarding Protocol
A controlled exit checklist for access removal, data return, deletion evidence, and residual-risk closure.
saasoffboardingdata-deletion
Updated
Sep 05, 2026$49
Sep 05, 2026$49
V1.0Application Security
Secrets Management for Development Teams
An implementation guide for preventing secrets in code, establishing secure storage, automating rotation, and responding to exposure.
secretsdevelopmentrotation
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Data Protection & Privacy
Secure Data Transfer Checklist
A concise checklist for approving and validating transfers of sensitive data across people, systems, vendors, and jurisdictions.
data-transferencryptionvendors
Updated
Sep 05, 2026$49
Sep 05, 2026$49
V1.0Application Security
Secure SDLC Operating Standard
An end-to-end operating standard that embeds security ownership, assurance activities, evidence, and release criteria into software delivery.
sdlcapplication-securitydevelopment
Updated
Sep 05, 2026$89
Sep 05, 2026$89
V1.0Governance, Risk & Compliance
Security Audit Readiness Playbook
An operational playbook for scoping audits, organizing evidence, coordinating owners, managing requests, and resolving findings efficiently.
auditcomplianceevidence
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.8Incident Response
Security Incident Command Handbook
A practical command model for coordinating technical responders, leadership, legal, and communications.
incident-commandcommunicationsgovernance
Updated
Jul 02, 2026$74
Jul 02, 2026$74
V1.0Security Operations
Security Monitoring Coverage Matrix
A practical method for mapping critical assets and attack techniques to telemetry, detections, response owners, and known gaps.
monitoringcoveragemitre
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Governance, Risk & Compliance
Security Policy Governance Framework
A governance framework for policy hierarchy, accountable ownership, review cycles, exceptions, communication, and evidence of adoption.
policygovernanceownership
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Identity & Access
Service Account Governance Standard
A governance baseline for discovering, owning, securing, rotating, monitoring, and retiring non-human identities.
service-accountsmachine-identitysecrets
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Security Operations
SIEM Use Case Prioritization Toolkit
A scoring toolkit for selecting SIEM use cases based on threat relevance, telemetry readiness, response value, and maintenance cost.
siemdetectionprioritization
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Security Operations
SOC Alert Triage Standard
A consistent triage standard for validating alerts, setting priority, documenting evidence, and handing cases to responders.
soctriagealerts
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Application Security
Software Dependency Risk Protocol
A protocol for approving, monitoring, updating, and responding to security risk in open-source and commercial software dependencies.
dependenciesopen-sourcesupply-chain
Updated
Sep 05, 2026$64
Sep 05, 2026$64
V1.0Resilience & Recovery
Technology Resilience Testing Guide
A risk-based guide for planning and governing failover, recovery, capacity, dependency, and operational resilience tests.
resiliencetestingfailover
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Third-Party Risk
Third-Party Breach Notification Playbook
An escalation playbook for assessing vendor breach notices, determining exposure, and coordinating evidence, communications, and remediation.
vendorsbreachnotification
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Security Operations
Threat Hunting Campaign Playbook
A campaign playbook for turning hypotheses into scoped hunts, repeatable analysis, defensible findings, and new detections.
threat-huntinghypothesisdetection
Updated
Sep 05, 2026$74
Sep 05, 2026$74
V1.0Third-Party Risk
Vendor Access Governance Standard
A lifecycle standard for approving, monitoring, reviewing, and revoking third-party access to systems and sensitive information.
vendorsaccessidentity
Updated
Sep 05, 2026$59
Sep 05, 2026$59
V1.0Vulnerability & Exposure
Vulnerability Remediation SLA Standard
A risk-based standard for remediation deadlines, ownership, exception handling, validation, and overdue vulnerability escalation.
vulnerabilityremediationsla
Updated
Sep 05, 2026$49
Sep 05, 2026$49
V1.0Vulnerability & Exposure
Zero-Day Exposure Response Playbook
A cross-functional playbook for rapidly finding exposure, applying mitigations, monitoring exploitation, and governing risk acceptance.
zero-dayvulnerabilityexposure
Updated
Sep 05, 2026$74
Sep 05, 2026$74