Security & compliance checklist templates
Recurring security and compliance procedures: access reviews, audits, GDPR, breach response, change control.
-
Data Breach Response Checklist
A data breach response checklist for small teams: contain the incident, assess the risk to people, meet notification deadlines and keep a defensible record.
-
GDPR Compliance Checklist
A practical GDPR checklist for small businesses: map personal data, set legal bases, update notices, sign DPAs and prepare for access requests and breaches.
-
ISO 27001 Internal Audit Checklist
An ISO 27001 checklist for planning and running an ISMS internal audit: scope, audit programme, evidence sampling, nonconformities and a clean report.
-
SOC 2 Readiness Checklist
A SOC 2 checklist for startups facing a first audit: set scope and criteria, write policies, run controls and collect evidence before the auditor arrives.
-
User Access Review Checklist (SOC 2 / ISO 27001)
A user access review checklist for SOC 2 and ISO 27001: pull user lists, confirm owners, revoke stale accounts and keep evidence an auditor will accept.
-
Business Continuity Plan Test Checklist
A business continuity checklist for testing your BCP: pick a realistic scenario, run a tabletop or live test, measure recovery times and fix what broke.
-
Data Subject Access Request (DSAR) Checklist
A DSAR checklist for handling GDPR subject access requests: log the request, verify identity, search every system, redact third parties and reply on time.
-
IT Change Management Checklist
A change management checklist for small IT teams: risk-rate each change request, get approval, plan rollback and keep evidence for SOC 2 or ISO 27001.
-
Phishing Incident Response Checklist
A phishing response checklist for small IT teams: triage the reported email, purge it from inboxes, reset compromised accounts and check for follow-on attacks.
-
Quarterly Security Review Checklist
A quarterly security review checklist for small IT teams: check MFA, admin accounts, patches, backups, alerts, domains and open risks in about an hour.
-
Swiss Data Protection Checklist (revFADP)
A revFADP checklist for Swiss SMEs: records of processing, processors, transfers abroad, privacy notice, access requests and breach reports to the FDPIC.
-
Vendor Security Assessment Checklist
A vendor security assessment checklist for small teams: tier the vendor by risk, review reports and contracts, check data handling and record a clear decision.
-
Firewall Rule Review Checklist
A firewall audit checklist for reviewing firewall rules and cloud security groups: find open ports, unused and overly broad rules, and record an owner for each.
-
Penetration Test Preparation Checklist
A penetration testing checklist for small teams: define scope and rules of engagement, prepare accounts and environments, and plan how findings get fixed.
-
Secrets and Credential Rotation Checklist
A credential rotation checklist for API keys, database passwords and tokens: find every consumer, rotate with no downtime, revoke the old secret and verify it.
-
Security Awareness Training Checklist
A security awareness training checklist for an annual programme: choose topics, train every employee, run phishing simulations and keep records for auditors.
Categories
Run this checklist with your team
Assign steps, set due dates, schedule it to recur or start it from CI. Every check is logged.
Start free