Complete cybersecurity governance documentation — policies, standards, procedures, and templates — aligned to NIST CSF 2.0, ISO 27001:2022, and CIS Controls v8. Three tiers to match your organisation's size and maturity.
Every tier includes framework-aligned, editable documents. Higher tiers add operational tools, board-ready materials, and white-label rights.
| Feature | Essentials $149 | Standard $397 | Enterprise $697 |
|---|---|---|---|
| Documents | ~30 | ~60 | ~78 |
| Policies | ✓ | ✓ | ✓ |
| Standards | Core | Full | Full |
| Processes | — | ✓ | ✓ |
| Procedures | Core | Full | Full |
| Forms & Templates | Core | Full | Full |
| NIST CSF 2.0 Aligned | ✓ | ✓ | ✓ |
| ISO 27001 Cross-Refs | ✓ | ✓ | ✓ |
| CIS Controls Mappings | ✓ | ✓ | ✓ |
| Compliance Mapping Workbook | — | ✓ | ✓ |
| Board Presentation | — | — | ✓ |
| RACI Matrix | — | — | ✓ |
| Metrics & KPI Dashboard | — | — | ✓ |
| White-Label Rights | — | — | ✓ |
Not blank templates — comprehensive, implementation-ready content with full framework traceability.
Every document maps to specific subcategories from the NIST Cybersecurity Framework 2.0.
ISO 27001:2022 Annex A and CIS Controls v8 cross-references throughout every document.
Editable .docx and .xlsx with [Organisation Name] placeholders. Add your logo, adjust scope, publish.
Every document includes ownership, accountability, and review obligations clearly defined.
Consistent structure, revision tracking, approval workflows, and review schedules built in.
Built on the official CIS / MS-ISAC Policy Template Guide for credibility and defensibility.
The Governance Suite provides core documentation. For deeper NIST CSF 2.0 coverage including AI security extensions and incident response playbooks, see the Governance Engine.
The Governance Suite is our core documentation package — policies, standards, procedures, and templates across three pricing tiers. The NIST CSF 2.0 Governance Engine is a more comprehensive product with 111–131 documents, AI security extensions, incident response playbooks, and deeper cross-mapping. Think of the Suite as foundational governance and the Engine as full operational governance.
All documents are Microsoft Word (.docx) and Excel (.xlsx). Fully editable — no PDFs or locked files.
Both. Each document is fully written with implementation-ready content. They're comprehensive enough to use almost as-is, designed for you to customise with your organisation's specifics.
Essentials for startups and small teams needing core policies. Standard for established organisations wanting complete coverage. Enterprise if you need board materials, metrics dashboards, or client delivery rights.
No. These are customisable template documents. Organisations should seek qualified professional advice for their specific circumstances and jurisdiction.
14-day money-back guarantee on all tiers.
Framework-aligned. Cross-mapped. Implementation-ready. Choose your tier and deploy.
Instant download · Editable DOCX & XLSX · 14-day money-back guarantee