Cybersecurity · Digital download

Small Business Cybersecurity Starter Kit

Editable checklists, templates, and a 30-day plan to put sensible cybersecurity basics in place — without hiring a full-time IT team.

Includes
7 editable files
Formats
4 Word (.docx) · 3 Excel (.xlsx)
Delivery
Download after checkout
License
One organization

Overview

Security basics, turned into a plan.

Most small organizations know they should “do something” about cybersecurity but are unsure where to start. This kit turns widely recommended basics into a practical plan you can work through in about 30 days.

It is organized around the six functions of the NIST Cybersecurity Framework 2.0 — Govern, Identify, Protect, Detect, Respond, and Recover — and written in plain language for owners, office managers, and executive directors.

Every file is editable. Add your organization’s name, adjust the policies to fit how you work, and use the spreadsheets to track progress.

Who it’s for

  • Small businesses with roughly 1–50 people
  • Nonprofits and community organizations
  • Owners and managers who handle IT alongside other duties
  • Organizations preparing to work with an outside IT provider

What’s included

7 editable files, in working order.

Numbered so you can work through them in sequence, starting with the quick start guide.

  1. DOCXStart Here — Quick Start Guide & 30-Day PlanHow to use the kit, who should be involved, and a week-by-week plan.
  2. XLSXSecurity Baseline Checklist40 practical controls grouped by NIST CSF 2.0 function, with status, priority, owner, and a progress summary.
  3. XLSXIT Asset & Account InventoryTrack devices, software and cloud services, key accounts, MFA status, and where important data lives.
  4. DOCXInformation Security Policy TemplateEditable starter policy covering acceptable use, passwords and MFA, devices, email, data handling, and reporting.
  5. DOCXIncident Response Plan TemplateRoles, contacts, first steps, and short playbooks for phishing, ransomware, lost devices, and account compromise.
  6. XLSXBackup & Recovery Plan and Test LogRecord what is backed up, where, and how often — and log restore tests.
  7. DOCXStaff Security Awareness Guide & AcknowledgmentA plain-language guide for your team, with an acknowledgment and training log.

Product previews

A look inside.

First pages from the actual files. Text in [brackets] is where you add your organization’s details.

Preview of Start Here guide: What’s in the kit, who to involve, and the 30-day plan.
Start Here guideWhat’s in the kit, who to involve, and the 30-day plan.
Preview of Security Baseline Checklist: Controls by NIST CSF 2.0 function with status, priority, and owner.
Security Baseline ChecklistControls by NIST CSF 2.0 function with status, priority, and owner.
Preview of Information Security Policy: An editable starter policy with placeholders for your details.
Information Security PolicyAn editable starter policy with placeholders for your details.
Preview of Incident Response Plan: Who to call, what to report, and first steps.
Incident Response PlanWho to call, what to report, and first steps.

File formats

Works with the tools you already use.

  • Word documents

    4 .docx files: guide, policy, incident response plan, and staff guide.

  • Excel workbooks

    3 .xlsx files with dropdowns, progress summaries, and printable layouts.

  • Compatible apps

    Microsoft Word and Excel, Google Docs and Sheets, or LibreOffice. Easiest to edit on a computer.

  • Accessible structure

    Real headings and table headers, so the documents work with screen readers.

Outcomes

What you’ll have when you’re done.

  • A clear picture of the devices, accounts, and data you need to protect
  • A prioritized checklist of security basics with owners and due dates
  • A starter security policy your team can read and acknowledge
  • An incident response plan, so you know who to call and what to do first
  • A backup and recovery record you can test against

Not included

  • Legal advice, or a guarantee of compliance with any law, regulation, or standard
  • Software, monitoring, or technical support
  • A certification or audit of your organization

Licensing

Clear terms for one organization.

You can

  • Use and edit the files inside your organization
  • Share them with staff, volunteers, board members, and advisers working for you
  • Keep using your customized versions

Please don’t

  • Resell, publish, or redistribute the files, edited or not
  • Share them outside your organization or post them for download

The details

The full license is in our Terms of Use and Sale. Refunds follow our Refund Policy.

FAQ

Questions, answered.

What format are the files?

Word documents (.docx) and Excel spreadsheets (.xlsx). They also open in Google Docs, Google Sheets, Apple Pages/Numbers, and LibreOffice.

Is this a compliance program?

No. The kit helps you put common, widely recommended security basics in place. It does not make your organization compliant with any specific law or standard. If you have regulatory obligations, review them with a qualified professional.

Can I edit the templates?

Yes. They are meant to be customized for your organization. The license allows use within your own organization; please do not resell or redistribute the files.

Do I need technical skills?

No. The kit is written for non-technical leaders. Some items, such as turning on multi-factor authentication or checking backups, may need help from whoever manages your computers.

How is the kit delivered?

After checkout you receive a download link by email from our checkout provider.

Who can use the files after purchase?

One purchase covers one organization. You can share the files with your staff, volunteers, board members, and advisers working on your behalf.

What if a file won’t open?

Email us and we will help or send a replacement. Refunds are handled under our Refund Policy.

Purchase status

Checkout opens soon.

The Cybersecurity Starter Kit is in final review and not yet for sale. Join the list to hear the moment it’s available.

Get notified at launch