Resource library

Free tools for teams handling confidential work.

Worksheets and checklists for funder questions, incidents, and day-to-day protection. Use them, then book a Baseline Review if you want someone to run the work.

Stakeholder evidence

Answer a funder, board, insurer, or auditor

These nonprofit cybersecurity resources help small teams prepare funder security questions, board reporting, cyber insurance reviews, and practical remediation planning.

Worksheet Funder Security Questions Worksheet Use this when a stakeholder asks about security. Next step: turn unanswered questions into an evidence plan or readiness review. Nonprofits & NGOs Checklist Nonprofit Cybersecurity Readiness Checklist Use this before a grant, board review, or insurance renewal. Next step: prioritize gaps, then book a Baseline Review if you want help running the work. Nonprofits & NGOs Next step Book a Baseline Review When worksheets reveal donor, beneficiary, field, or program-data risk that needs someone to run protection day to day. Managed security How we work How we work with your team Review, written scope, enroll, and stay on devices, accounts, and inbound mail — including when a funder or board needs a clear answer. Engagement
Incident readiness

Prepare for an incident before it happens

These incident response planning resources help small teams name responders, preserve evidence, define first-hour actions, and decide when outside help is needed.

Template Incident Response Plan Template Use this when incident roles are unclear. Next step: test the plan with a tabletop or readiness scope. Small teams Guide Incident Response Without a Security Team Use this to understand ownership before a crisis. Next step: assign roles, escalation paths, and first-hour actions. Small teams Next step Book a Baseline Review When a draft plan needs tested roles, escalation paths, and someone to stay on the work after the tabletop. Managed security
Confidential workflows

Reporting, clients, and campaign materials

These checklists help teams review devices, accounts, communications, and files around confidential work — reporting, legal, or advocacy.

Checklist Newsroom Source Protection Checklist Use this before sensitive outreach or publication. Next step: review newsroom devices, accounts, files, and escalation paths. Newsrooms Service sheet Managed Security for Independent Newsrooms Use this to compare ongoing newsroom protection and workspace support. Next step: choose coverage for devices, accounts, or collaboration. Newsrooms Next step Who we work with Investigative teams, legal clinics, and advocacy organizations use the same Baseline Review. Human rights defenders
Validation scoping

Choose the right security review

These security assessment scoping resources help teams choose between an assessment, penetration test, purple team exercise, exposure review, or remediation support.

Buyer guide Security Assessment vs. Pen Test vs. Purple Team Use this when stakeholders ask for testing but the right scope is unclear. Next step: choose assessment, pen test, purple team, or remediation. For scoping decisions Next step Book a Baseline Review When a customer, board, funder, or internal leader needs independent proof — or ongoing protection after the test. Managed security Guide Why Your Funder Is Asking About Cybersecurity Use this to understand why the question is being asked. Next step: prepare evidence and owners before responding. Nonprofits & NGOs
Work with us

Not sure which resource or service fits?

Start with the free resource that matches your pressure. If you already have a deadline, stakeholder question, or security gap, share a few details and Secure Origin will recommend a practical next step.

Book a Baseline Review
Book a review Book call