Store › Packs › SME Cyber Readiness Pack
Got a security questionnaire, a tender date and no plan to close the gaps?
Open the workbook, answer the seven sizing questions, and the tiering, the control list, the evidence you need and the order to fix gaps are already worked out for you.
Refund within 14 days if nothing downloaded · Tax invoice included · Links in your inbox within a minute
- 8 files: 2 Excel, 2 Word, 1 PowerPoint, 3 PDF
- Excel workbook, 18 sheets: 24 security domains including cloud and AI, tier chooser, 230-control self-assessment across five tiers, gap scoring ordered cheapest first, hygiene baseline, evidence register, risk register with 30 scenarios, treatment plan, asset inventory, supplier register, 72-question internal audit checklist, readiness dashboard
- Word policy set: 15 policies, 13,000 words, with roles and an acknowledgement form
- Word evidence register: every control's evidence, format, owner and refresh, domain by domain
- Instant download, free updates for life, no subscription
The walkthrough: the problem, the finished result, every file opened on screen.
Less time, fewer meetings, one picture for the board
Two weeks of e-mails asking who uses what become one afternoon. The inventory sheet asks the six questions for you.
Half the work is already done. The gap map shows what your security management system already gives you.
One page and one picture. The paper and the heat map come out of the workbook the same day you finish scoring.
The same method and wording on every client, and a worked example that shows them what done looks like.
The questionnaire answered from a dated workbook, not from memory. No consultant, no quarter lost.
You recognise this
- A customer's security questionnaire lands with a two-week deadline and nobody owns the answer.
- An assessor asks for evidence you didn't know you had to keep, in a format you now have to rebuild.
- The board wants a one-line readiness number and you have a folder of half-finished spreadsheets.
- You open a blank workbook to start a risk register and close it again an hour later.
This pack is the answer to that moment. Not a course, not a standard, not a consultant's day rate: the files, filled in once, ready for you to fill in again.
Starting from a blank page, or starting from the pack
The same work either way. The difference is how long it takes and what the auditor sees at the end.
| From a blank page | With the pack | |
|---|---|---|
| Working out which controls apply to you | Guess, or read guidance for weeks | Answer seven questions, get your tier |
| Scoring where you stand | Build a scoring sheet from scratch | 230 controls already scored, five tiers |
| Deciding what to fix first | Fix the loudest problem, not the cheapest | Gaps ordered cheapest first, automatically |
| Proving it to an assessor | Chase evidence the week before | Evidence register tells you what, who, how often |
| Explaining progress to the board | Rebuild a slide from memory | 12-slide briefing deck, ready to present |
A marketplace template, a consultant, or the pack
Three ways to the same documents. What each one gives you, and what it asks of you.
| A marketplace template | A consultant | With the pack | |
|---|---|---|---|
| What you get | A document or PDF you fill in alone | A bespoke engagement built around your business | A full workbook, policy set and guide |
| Who does the work | You, with no guidance | The consultant, largely on your behalf | You, guided step by step |
| Scoring and the gap list | No scoring, no gap order | Scored by the consultant, on their schedule | Self-scoring, gaps ranked cheapest first |
| Evidence for the auditor and the board | You assemble evidence from scratch | Consultant compiles evidence over several weeks | Evidence register built in, owner and refresh listed |
| Time to a board paper | Weeks of unguided work first | Often eight to twelve weeks | A working draft within days |
| What it costs | Under USD 100, once | From a few thousand dollars | USD 129.00, once |
8 files in the pack
The SME Cyber Readiness Pack turns a vague compliance request into a tracked project you can finish. Inside the download are eighteen linked sheets scoring 230 controls across five tiers, a full policy set, two full worked examples as reports, a 60-page guide to the assessment itself, and a short briefing deck for your board. Fill it in once, and you have the evidence, the gap list, and the plan a customer, a tender, or an assessor will actually ask to see.
- Excel workbook, 18 sheets: 24 security domains including cloud and AI, tier chooser, 230-control self-assessment across five tiers, gap scoring ordered cheapest first, hygiene baseline, evidence register, risk register with 30 scenarios, treatment plan, asset inventory, supplier register, 72-question internal audit checklist, readiness dashboard
- Word policy set: 15 policies, 13,000 words, with roles and an acknowledgement form
- Word evidence register: every control's evidence, format, owner and refresh, domain by domain
- Two worked examples as full reports: a healthcare SME from 58% to 95% in eight weeks, and a supplier certified in week 11 for a tender
- Filled example workbook for the healthcare case
- PDF guide, about 60 pages: how the assessment runs, who assesses, what gets asked, nine hygiene areas, choosing your tier, every domain, the risk register, closing gaps cheapest first, assessment day, common fails
- PowerPoint: a 12-slide management briefing
- How-to video inside your order page
Open it before you buy it
Real screens from the files, not a mock-up. Tap any picture to read it full size.
Readiness dashboard
by domain and by status, the one picture management asks for
Self-assessment
every control with its tier, your status, the evidence to show, an owner and a date
Tier chooser
seven answers pick the tier and the controls in scope
Risk register
thirty scenarios already written, scored on the same scales the assessor expects
What you can do the day you download it
- Find your tier in under ten minutes using the seven sizing questions
- See your current score against all 230 controls the same afternoon
- Hand the assessor an evidence register that already lists what they'll ask for
- Open a risk register with 30 scenarios already written and rated
- Brief the board using a 12-slide deck instead of building one
- Issue 15 policies with roles and an acknowledgement form by end of day
- Run your own 72-question internal audit before anyone else does
- Copy a worked example that went from 58% to 95% in eight weeks
None of it starts from a blank page. Every sheet is already filled in once, in the worked example, so you copy the shape and change the facts.
A worked example, page by page
A completed one is inside the pack, so you see where you end up before you pay.
Counted, not described
| Excel workbooks | 2 |
| Word documents | 2 |
| PowerPoint file | 1 |
| PDF files | 3 |
| Excel workbook, 18 sheets: 24 security domains including cloud and AI, tier chooser, 230-control self-assessment across five tiers, gap scoring ordered cheapest first, hygiene baseline, evidence register, risk register with 30 scenarios, treatment plan, asset inventory, supplier register, 72-question internal audit checklist, readiness dashboard | ✓ |
| Word policy set: 15 policies, 13,000 words, with roles and an acknowledgement form | ✓ |
| Word evidence register: every control's evidence, format, owner and refresh, domain by domain | ✓ |
| Two worked examples as full reports: a healthcare SME from 58% to 95% in eight weeks, and a supplier certified in week 11 for a tender | ✓ |
| Filled example workbook for the healthcare case | ✓ |
| PDF guide, about 60 pages: how the assessment runs, who assesses, what gets asked, nine hygiene areas, choosing your tier, every domain, the risk register, closing gaps cheapest first, assessment day, common fails | ✓ |
| PowerPoint: a 12-slide management briefing | ✓ |
| How-to video inside your order page | ✓ |
| Free template | 1 |
| Updates, for life | ✓ |
From the first file to the finished programme, in order
SME Cyber Readiness Pack
Open the workbook, answer the seven sizing questions, and the tiering, the control list, the evidence you need and the order to fix gaps are already worked out for you.
Refund within 14 days if nothing downloaded · Tax invoice included · Links in your inbox within a minute
Stop starting from a blank page
230 controls, 30 risk scenarios and a 72-question audit are already written; you fill in status, not structure.
The scoring sheet ranks what's left to fix cheapest first, so budget goes where it closes the most gaps.
The evidence register lists what each control needs, who owns it and when it's refreshed, domain by domain.
A 12-slide briefing and a dashboard turn your progress into something you can present, not explain.
Not a template shop. A practitioner's files.
The same method and wording used on client engagements under an ISO/IEC 27001 certified organisation.
Scores, bands, treatment, residual risk. The numbers the auditor and the board both accept.
When ISO/IEC 42001 or the guidelines move, the workbook moves, and you get the update free.
Security architecture, risk, compliance and testing for enterprises, agencies and SMEs, with a licensed, CREST Pathway+ team.
Questions go to [email protected] and are answered by the team that wrote the files.
Jeffrey, CISSP, AAISM, CISO. The author line is on every file.
- SMEs that must show readiness to a customer, a tender or a regulator
- Owners and office managers now responsible for cyber security
- IT providers who assess their clients
- Consultants who want a workbook that scores itself
- You run a large enterprise with a dedicated security team and existing tooling.
- You need a policy set alone with no scoring or evidence work attached.
- You're the first or only person handling this and need a working structure today.
- You need the evidence, the scoring and the policies in one place, on your own timeline.
A few weeks from now
Six weeks from now, your dashboard shows a score you can defend in a meeting, your evidence register already answers the three questions the assessor always asks, and the risk register has 30 scenarios rated instead of a blank sheet. The policy set is signed off, the board has seen the 12-slide briefing, and the questionnaire that used to take two weeks takes an afternoon.
That is what the pack is for. USD 129, one payment, in your inbox within a minute, refund within 14 days if nothing downloaded.
SME Cyber Readiness Pack, answered
Do I need prior security knowledge to use this?
No. The 60-page guide explains every domain and the nine hygiene areas in plain terms before you touch the workbook.
Does the pack guarantee I'll pass an assessment?
No tool can guarantee an outcome. The pack gives you the scoring, the evidence and the policies an assessor typically asks for.
Can I use this for more than one client?
Yes, under the single business licence you can use it on your own business and on client work, and you can rebrand it.
Can I resell the pack itself?
No, the licence covers your own and client use, not resale of the files.
What if I only need to see how the scoring works first?
Download the free Cyber Readiness Evidence Checklist with your email address and try the evidence format before buying.
How long does the self-assessment take?
The worked examples show full readiness built in eight weeks and a passed assessment by week 11; your own pace depends on your tier.
Single business licence: use it on your own business and your client work, rebrand it as you like, resale of the files is not included.
Digital product. Full refund within 14 days if nothing has been downloaded. A defective file is replaced at once. Terms and licence
Standards are named where the pack follows them. No standards body endorses this product, and Infracom is not linked to or endorsed by any government agency. The pack does not replace legal or regulatory advice.
Start with the free template
Cyber Readiness Evidence Checklist: one sheet from this pack, sent to your work e-mail after one confirmation click. Then four short mails over ten days on how to use it. Unsubscribe with one click.
Got a security questionnaire, a tender date and no plan to close the gaps?
8 files, the worked example, one template free. One payment. Links in your inbox within a minute. Refund within 14 days if nothing downloaded.
