Tell us about your company

About 10 minutes. If you are unsure, pick the closest answer: unsure answers go on your gap list and show as "Not yet" on your answer sheet, so nothing is overstated. Next you pay through Stripe, and your kit opens right after.

1. Your kit

Starter, $496 core policies and a 15-question answer sheet. Full, $149All 14 policies, a 40-question answer sheet (also CSV) and a risk register.

2. Your company

Company name

What you do

Website (optional)

City

State

People with access to company systems, including you

Do contractors or freelancers have access?

How you work

Plan effective date

3. People

Owner or CEO name (approves the policies)

Their title

Security Lead (the person in charge of security; can be you)

Their title

Incident phone (optional)

Email for your receipt and kit

Security awareness training given?

Background checks before access?

When someone leaves

4. Systems and tools

Main cloud

Other cloud or host name (if Other)

Where customer data is stored (optional)

Email and identity

Password manager (blank if none)

Multi-factor login (MFA)

Code host (software firms; blank if none)

Code changes need a second person's review?

Remote management tool (IT providers: RMM)

Ticketing tool (optional)

Logging or monitoring tool (optional)

Security logs collected?

5. Devices

Work devices

Drives encrypted (BitLocker/FileVault)?

Updates

Device management tool (MDM; blank if none)

Anti-malware / EDR (blank if not sure)

6. Data and recovery Data you handle for customers (tick all that apply)

Customer data encrypted?

Backups

Restored from a backup as a test?

Backup tool (optional)

Regular vulnerability scanning?

Penetration test in the last 12 months?

Cyber insurance?

Other vendors that hold your or your customers' data (optional, one per line, e.g. Stripe, Postmark)

By continuing you agree to the terms. This is a starting policy set, not a SOC 2 or ISO 27001 certification and not legal advice.