Free Cybersecurity Resources
Checklists, guides and templates written by the TIKAJ security analysts. Take them and use them. No spam, just the documents.
If an RBI inspection is on the calendar, go straight to the RBI cyber security framework checklist and the free self-assessment on the same page. The rest are grouped loosely by job. DMARC, to pick one, is less about email theory than about not blocking your own invoices the day you switch enforcement on. Our security analysts wrote these and revise them when regulations change.
RBI Cyber Security Framework Checklist and Self-Assessment
The 2016 circular and its Annex 1 baseline controls as yes, partly or no questions, plus a free self-assessment that ranks what to fix before an inspector asks.
SEBI Cybersecurity Checklist
For brokers, depositories and other SEBI-regulated entities working through the cyber resilience requirements.
DMARC Implementation Guide
Start at p=none, read the reports for a few weeks, then tighten. SPF and DKIM come first.
DMARC Implementation Guide (Advanced)
For when marketing, HR and billing all send from your domain through different vendors and nobody has a full list.
Vendor Risk Assessment
Questions to send suppliers, and how to tell a real answer from a copied policy.
Cybersecurity Audit Checklist
What to check, control by control, in an internal audit.
Cybersecurity Risk Assessment
Templates that take you from an asset list to a treatment plan.
Cybersecurity Policy Template
A starting policy you edit to match how your company really works, rather than the other way round.
Data Protection Compliance Checklist
Data protection obligations under GDPR and Indian law, laid out as checks.
Breach and Attack Simulation Guide
How to run simulated attacks against your own controls and read what they tell you.
Incident Response Plan
Who gets called first, who can take a server offline, and who talks to the regulator.
Secure Configuration Review Checklist
Hardening baselines for servers, cloud accounts and network gear.
Need a Customized Assessment?
A checklist tells you what to look at. If you'd rather have someone test it, that is what our VAPT work is for.