
The problem it solves
Turn broad cybersecurity concerns into an owned, risk-led improvement plan without assuming a dedicated security team.
Who it is for
Small businesses, charities, professional practices and IT managers needing a practical cybersecurity starting point.
What is included
- Cybersecurity Priorities Assessment
- Cyber Risk Register
- Essential Security Controls Checklist
- 90-Day Cybersecurity Improvement Plan
- Staff Cybersecurity Policy
- Incident Response and Recovery Plan
- Supplier and Cloud Security Assessment
- Cyber Essentials Readiness Checklist
- Adaptation and Implementation Guide
File formats
Editable Excel and Word resources with PDF guidance, supplied in a downloadable ZIP file.
How to implement it
- Assess material risks and evidence.
- Prioritise improvements and assign owners and dates.
- Deliver and review the 90-day plan.
Practical benefits
- Identify and rank material risks
- Strengthen preventive and recovery controls
- Clarify staff, supplier and incident responsibilities
- Track 30, 60 and 90-day improvements
Genuine file preview
See an included template.

The purchased file is editable.
Limitations
This management toolkit is not penetration testing, technical assurance, legal advice or Cyber Essentials certification. Organisation-specific adaptation and professional judgement remain essential.