The Isaacs Group Launches Cybersecurity Template Pack With 45 Excel Workbooks and 13 Policies, Plus Two Cyber Risk Assessments

The Isaacs Group, a vCISO and cybersecurity advisory firm serving K-12 education, healthcare, government, criminal justice, and enterprise organizations, has released three new products on Gumroad: a Cybersecurity Template Pack, a Small Business Cyber Risk Assessment, and a Personal Cyber Risk Assessment.

Cybersecurity Template Pack

The Cybersecurity Template Pack gives security, IT, compliance, and risk teams a working starting point for the documentation that auditors, insurers, customers, and regulators ask about. It is available at https://isaacsgroup.gumroad.com/l/colzin. The Core edition includes 45 Excel workbooks across 10 domains, from data security and network security to cloud security, identity and access management, and third-party risk. The workbooks are organized as 20 registers, 12 logs, 6 assessments, and 7 matrices. Core also includes 13 Word policies, a pack index, and a license.

Every workbook follows the same five-tab layout: Instructions, Working, Dashboard, Control Mapping, and Reference. The dashboard calculates live counts and a chart from the entries a team makes, and the Control Mapping tab shows which controls the completed template can support as evidence. Mappings cover 18 frameworks and regulations, including NIST CSF 2.0, ISO/IEC 27001:2022, SOC 2, NIST SP 800-53, CIS Controls v8, HIPAA, PCI DSS, and GDPR.

A Core and Sector Policy Editions option adds 39 more documents. Each of the 13 policies is also provided in FERPA, GLBA, and CJIS editions for organizations that handle student records, financial information, or criminal justice information.

Small Business Cyber Risk Assessment

The Small Business Cyber Risk Assessment is a 41-question Excel workbook organized around the six NIST CSF 2.0 functions, with a CIS Controls v8 reference on each question. It is available at https://isaacsgroup.gumroad.com/l/qegdven. It produces a weighted score, an insurance readiness score based on controls that cyber insurers commonly ask about, a risk heat map, and a ranked list of the 10 fixes that remove the most risk. Each gap can be assigned an owner, a target date, and notes. It is priced at $29.

Personal Cyber Risk Assessment

The Personal Cyber Risk Assessment is a free workbook for individuals and households, available at https://isaacsgroup.gumroad.com/l/ifvwj. It asks 32 plain-English questions across seven areas, including accounts and passwords, scams and AI fraud, home network and smart devices, and backups. It returns a score out of 100 and a ranked plan, with a tracker to measure progress over time. It takes about 15 to 20 minutes.

Licensing and limits

The template pack is licensed to one organization for its own internal use. Buyers may make unlimited completed copies, adapt and rebrand the templates internally, and share completed work with their own auditors, insurers, and regulators. Resale and redistribution are not permitted. Consultants, vCISOs, and MSPs who want to use the pack with clients need a separate license, which is not yet available.

The templates and assessments are self-help tools. They are not legal advice or a security audit, and they do not guarantee compliance with any law or framework.

About The Isaacs Group

The Isaacs Group is a vCISO and cybersecurity advisory firm. It is led by Dr. Aaron Isaacs, PhD, CISM, CISA, CRISC, who has 25 years of cybersecurity experience and is a former Microsoft security engineer. More information is available at theisaacsgroup.net.