Defense Toolkit

Practical, ready-to-edit templates written by working practitioners. Free to download, no signup, no email gate. Need the complete, professional versions, built out into a full kit? See the Starter Kit below.

Free templates

  • Acceptable Use Policy (AUP): Template defining acceptable use of company systems, BYOD rules, and enforcement. Adaptable for organisations of 5–250 staff.
  • Incident Response Plan (IRP): A documented, repeatable process for detecting, containing and recovering from security incidents, with general guidance on regulator and customer notification timelines.
  • Vendor Security Questionnaire: A short, practical questionnaire to assess any vendor that will hold your customer data, with sections on access control, encryption and incident response.