Free InfoSec Resources

DIY tools and official sources - unbiased, direct from authorities

Compliance Frameworks & Official Resources

E-ITS (Estonia)

Mandatory for critical infrastructure operators in Estonia

SOC 2 (US)

Trust principles for service providers - required by enterprise customers

ISO 27001 (International)

Global ISMS standard - recognized certification worldwide

Official Estonian State Resources

RIA E-ITS Portal

Information System Authority - E-ITS compliance guidelines

Open resource →

AKI Data Protection

Data Protection Inspectorate - GDPR enforcement

Open resource →

CERT-EE

Cybersecurity Incident Response - security advisories

Open resource →

Government Regulation No. 121

Network and information systems cybersecurity requirements (E-ITS law)

Open resource →

Curated External Resources

Particularly valuable for LLM-assisted compliance work - clean, structured data from authoritative sources

MITRE ATT&CK

Structured threat data and adversary tactics

Open resource →

NIST SP 800-53/171

Security and privacy control frameworks

Open resource →

CWE

Software weakness taxonomy and descriptions

Open resource →

ENISA Threat Landscape

Annual European cybersecurity threat reports

Open resource →

GDPR Official Text

Structured legal format - EU regulation text

Open resource →

Free Document Templates

Download markdown templates to kickstart your compliance documentation

Asset Inventory Template
Map and track information assets systematically
Risk Assessment Matrix
Identify and prioritize security risks
Incident Response Playbook
Structured playbook for security incidents
Business Continuity Plan
Outline for continuity and disaster recovery
Access Control Policy
Template for access management policies
Data Processing Register
GDPR Article 30 processing activities record

Need Expert Implementation?

Our certified ISO 27001 Lead Auditors can build your entire compliance system - audit-ready guaranteed