Ready-to-use registers, checklists and plans in one consistent Secrato format, built for European and Benelux compliance teams and free to use within your organisation.
Log source and detection use-case register
A working register to plan and evidence security logging and monitoring. It lists 32 typical log sources and 30 pre-filled detection use cases mapped…
Get the template →Cbw readiness checklist
A working checklist for the Dutch Cyberbeveiligingswet and Cyberbeveiligingsbesluit. It covers scoping, NCSC registration, every Cbb duty of care measure, the reporting duty and…
Get the template →CRA readiness checklist (Annex I mapped)
A product-level checklist that maps every Cyber Resilience Act essential requirement in Annex I, plus the manufacturer, reporting, documentation and CE marking obligations, to…
Get the template →Incident notification decision and timeline sheet
A working sheet for the first hours of an incident. It walks the reporting lead through the NIS2, DORA, CRA and GDPR classification questions,…
Get the template →NIS2 Belgium readiness checklist
A working checklist for the Belgian NIS2 Law. It runs from the scope decision and CCB registration through CyFun or ISO/IEC 27001 implementation to…
Get the template →Cyber tabletop exercise kit
A complete kit to plan, run and document a two- to three-hour cyber tabletop exercise. It contains a planning sheet, four ready-to-adapt scenarios with…
Get the template →NIS2 scope decision worksheet
A worksheet that takes each legal entity through the NIS2 scope test, from sector mapping to registration. It records the facts, the rule applied…
Get the template →Supplier security questionnaire
A proportionate security questionnaire for ICT suppliers, aligned with NIS2 Article 21, DORA third-party requirements, ISO/IEC 27001 and GDPR. Send it to suppliers, score…
Get the template →Incident response plan
A complete, editable incident response plan aligned to NIST SP 800-61r3 and NIS2. It covers roles, severity and escalation, the response phases with checklists,…
Get the template →Information security policy
An editable top-level information security policy for organisations preparing for NIS2, CyFun, the Cyberbeveiligingswet or ISO/IEC 27001. It sets direction, roles and principles, and…
Get the template →Ransomware first-72-hours checklist
A timed checklist for the first 72 hours of a ransomware attack and the weeks after. It sits next to a decision log for…
Get the template →DORA gap assessment workbook
A gap assessment that maps DORA's ICT risk management, incident, testing, third-party and information-sharing requirements, plus the key RTS articles, to current state, maturity,…
Get the template →