Resource library

Free cybersecurity tools for small teams handling sensitive information.

Use these worksheets, checklists, templates, and guided tools to answer stakeholder questions, prepare for incidents, protect sources, choose the right security review, and decide when to ask for help.

Stakeholder evidence

Answer a funder, board, insurer, or auditor

These nonprofit cybersecurity resources help small teams prepare funder security questions, board reporting, cyber insurance reviews, and practical remediation planning.

Worksheet Funder Security Questions Worksheet Use this when a stakeholder asks about security. Next step: turn unanswered questions into an evidence plan or readiness review. Nonprofits & NGOs Checklist Nonprofit Cybersecurity Readiness Checklist Use this before a grant, board review, or insurance renewal. Next step: prioritize gaps with nonprofit cybersecurity support. Nonprofits & NGOs Service path Cybersecurity for Nonprofits and NGOs Next step when the worksheets reveal donor, beneficiary, field, or program-data risk that needs managed security or evidence support. Nonprofit security Service path Security Evidence for Funders, Boards, and Auditors Next step when a funder, board, auditor, insurer, or customer needs evidence your team can explain and maintain. Evidence support

Incident readiness

Prepare for an incident before it happens

These incident response planning resources help small teams name responders, preserve evidence, define first-hour actions, and decide when outside help is needed.

Template Incident Response Plan Template Use this when incident roles are unclear. Next step: test the plan with a tabletop or readiness scope. Small teams Guide Incident Response Without a Security Team Use this to understand ownership before a crisis. Next step: assign roles, escalation paths, and first-hour actions. Small teams Service path Incident Response Planning Next step when a draft plan needs tested roles, escalation paths, communication triggers, and tabletop practice. Readiness support

Source protection

Protect journalism and sensitive reporting

These newsroom source protection resources help journalists and press freedom teams review devices, accounts, source communication, pre-publication files, and escalation paths.

Checklist Newsroom Source Protection Checklist Use this before sensitive outreach or publication. Next step: review newsroom devices, accounts, files, and escalation paths. Newsrooms Service sheet Managed Security for Independent Newsrooms Use this to compare ongoing newsroom protection and workspace support. Next step: choose coverage for devices, accounts, or collaboration. Newsrooms Service path Cybersecurity for Newsrooms and Press Freedom Teams Next step when source-protection gaps involve devices, accounts, pre-publication files, or response paths. Newsroom security

Validation scoping

Choose the right security review

These security assessment scoping resources help teams choose between an assessment, penetration test, purple team exercise, exposure review, or remediation support.

Buyer guide Security Assessment vs. Pen Test vs. Purple Team Use this when stakeholders ask for testing but the right scope is unclear. Next step: choose assessment, pen test, purple team, or remediation. For scoping decisions Service path Penetration Testing and Security Validation Next step when a customer, board, funder, or internal leader needs independent proof that controls were tested. Validation work Guide Why Your Funder Is Asking About Cybersecurity Use this to understand why the question is being asked. Next step: prepare evidence and owners before responding. Nonprofits & NGOs

Work with us

Not sure which resource or service fits?

Start with the free resource that matches your pressure. If you already have a deadline, stakeholder question, or security gap, share a few details and Secure Origin will recommend a practical next step.

Find the right starting point