1. How does the framework .. work?
The idea is that you answer a series of questions in the spreadsheet that we share with you, and the output is:
- An executive summary report: useful to show your senior leadership team and gives you a birds-eye view on how your cybersecurity posture is currently. It also includes a short, auto-generated, narrative report.
- A task report: a list of current tasks that would improve your cyber security posture. It is ordered by priority.
- Risk and alignment report: a list of current risks, and alignment of the Foundation Cyber Security Framework controls with four well-known frameworks - CIS Controls v8.0, NIST 800-53, the Essential Eight, and ISO27001:2013.
2. Who is the best person to complete the Framework?
The best person to complete the framework would be the IT Manager or Head of Technology - somebody senior and also close to the operations of a business.
2. What if I don’t have the time, or the resources, or the capability to be doing this myself?
We offer a low-cost option for us to conduct a more in-depth and collaborative review. More information is available here on the Dedicated Cyber Security Review page.
4. Do I get a spreadsheet? How does that work?
The Foundation Cyber Security is provided in the form of a Google Sheet, though this can be exported and used in Microsoft Excel. If you don’t use Google Workspace, you can sign up to a personal account for free - or, just contact us and we’ll provide you with an Excel copy directly.
5. Can I try this out before I buy?
Sure! You have a couple of options, either check out the example sheet (already filled out), or once you have purchased the tool, we are happy to provide a refund within 90 days if you are unhappy for any reason. See our refund policy or contact us.
6. Why a spreadsheet? Wouldn’t an app be better?
Foundation Cyber Security used to be an app! But honestly it was just a little clunky, and a spreadsheet is just faster and easier for you to fill out, and also easier to maintain. After all, it’s all about the content and reporting - and a spreadsheet does a great job.
This is how we’re able to keep the cost so low, and put our resources into maintaining the tool with regular updates.