New Post-Quantum Cryptography Standard · AI Agent Security Standard · or both in the Emerging Risks Pack →
Prices in USD · Instant download · Templates in Word and ExcelSupportContact usCart
CyberGlass
Free cyber checkTalk to an expert

Shop / Program kits

IT Security Program Kit

A complete, editable IT security program: charter, governance, policy, risk method, standards and workbook, structured to work together.

First page of IT Security Program Kit

View sample pages (PDF) ↗

What's inside

  • 00 Master Implementation Roadmap: a 24-week plan in five phases mapped to the NIST CSF 2.0 functions, telling you which document to use when, plus a CSF 2.0 Cross-Mapping Matrix showing which documents address each of the 106 outcomes
  • Cybersecurity Program Charter with vision, principles, security missions and KPIs/KRIs
  • First 90 Days Plan
  • Governance Framework: security services, governance rhythm, security debt, capability roadmap, RACI and exceptions
  • Information Security Policy (10 pages, including artificial intelligence use)
  • Risk Management Methodology
  • Incident Response Plan: severity levels, roles, response phases, notification timelines and playbooks
  • Business Continuity and Disaster Recovery Plan with a BIA and recovery workbook (MTPD, tiers, RTO/RPO gaps, test log)
  • Excel workbook: risk register, 30-asset inventory with attention flags, vulnerabilities and patches, backup and recovery, suppliers, exceptions, RACI, self-calculating KPIs and incident contacts
  • Every document now includes real-world incidents, Auditor Red Flag callouts, small-business vs enterprise notes, worked examples, and a Control Register in the workbook that links each control ID to its owner and evidence
  • Links 72 of 106 NIST CSF 2.0 outcomes to specific sections, shown in the CSF 2.0 Cross-Mapping Matrix
  • Not included: training slide decks. The documents set the training requirements; deliver them with your own provider or materials

Format

Word (.docx) and Excel (.xlsx). Editable, with highlighted placeholders and guidance notes you delete before publishing.

Frameworks referenced

  • NIST CSF 2.0
  • ISO/IEC 27001:2022
  • SOC 2
  • Cyber Centre baseline
  • Privacy laws (GDPR, PIPEDA)

Aligned with the frameworks named. Templates support your program; they don't certify compliance.

Who it's for

Small and medium organizations, security leads, consultants and MSPs who want a structured starting point instead of a blank page.

Questions

Is this a finished policy I can use as is?

No. It's a template: a guideline based on common industry practice. Review each requirement, remove what doesn't apply, set values you can meet, and have the final version reviewed by people who know your systems and obligations.

How do I receive the files?

After checkout you get an instant download link by email from our payment partner.

Can I share it with clients?

The licence covers use within your own organization. Consultants and MSPs who want to use templates with clients should contact us.

Refunds and updates

See our licence and refund policy.

Often added

New
Policies & standards

Post-Quantum Cryptography and Cryptographic Agility Standard

Plan your move to post-quantum cryptography (ML-KEM, ML-DSA, SLH-DSA) in plain language: what PQC is, a cryptographic inventory, harvest-now-decrypt-later priorities, hybrid key exchange, 2030/2031/2035 milestones and crypto agility.

  • NIST FIPS 203/204/205
  • NIST IR 8547
  • NIST SP 800-227
US$129Details
New
Bundles

Emerging Risks Pack: Identity, AI Agents and Post-Quantum

Three standards for the newest risks: help desk impersonation and mass file theft (STD-03), AI agents acting on your systems (STD-04) and the move to post-quantum cryptography (STD-05).

  • NIST SP 800-63B
  • NIST AI RMF 1.0
  • OWASP Top 10 for Agentic Applications
US$249Details

Use alongside your own licensed copy of the standard. CyberGlass does not sell or reproduce standard text.

Based on NIST CSF 2.0. Republished courtesy of the National Institute of Standards and Technology. NIST does not endorse CyberGlass.