Independent security assurance and editable documentation to keep organizations secure, compliant and resilient Questions? contact@rootguardsecurity.com
ROOTGUARDSECURITY LIMITED
Free tools Talk to us
Products ▼
All documentation packsSix editable packs, every one with a free sample Security Program PackNIST CSF 2.0, ISO 27001, CIS Controls Incident Response PackPlaybooks, evidence procedures, briefing templates Data Privacy PackNotices, inventories, subject request workflows SOC 2 Readiness PackMapped to the Trust Services Criteria CMMC Level 1 and Level 2FCI and CUI, for the US defense supply chain
Services ▼
All three servicesCompare scope, fee basis and what each ends with Security Program DeploymentAssess, document, implement, train, verify Incident Readiness DeploymentPlan, playbooks, tabletop exercise, verification Program SupportMonthly independent verification of closures
Why RootGuard ▼
IndependenceWe report to you, not to your IT provider Evidence, not assertionFull populations where the scale allows You own everythingEditable files, no platform, no lock-in Who does the workCISM, CISSP, CDPSE, CCSP, CHFI
Resources ▼
All fourteen free resourcesAssessments, policies, checklists and an exercise pack Free guidesPlain-language explainers on the questions buyers ask Framework referenceWhich standard applies to you, and why
Blog
About us

Notes

Practitioner writing on security assurance, documentation and the questions Caribbean and US buyers are actually being asked.

Coming first

What we are writing

We publish when we have something worth reading rather than on a schedule. These are the first four pieces, in order.

PieceWhy it matters
What a customer security questionnaire actually asks forThe strongest trigger we see. Most organizations answer from memory and cannot evidence a single line.
What the regional incident record actually teachesNamed, publicly reported attacks in one small market, and the control failures common to them.
Where data protection law really standsObligations that exist without an activated enforcement regime, and what that means in practice.
Reading a national cybersecurity framework when it landsWhat to do in the first month after a framework is published, before the consultants arrive.

If one of these would be useful before it is published, tell us and we will send a draft.

In the meantime

The free tools are more useful than an article

Four complete documents and two self-scoring workbooks, free and with no account required. They will tell you more about where you stand than anything we could write.

Free toolsResources