Downloads
This page lists a variety of tools, templates, frameworks, and practical scenarios that I have created from my personal and professional experience. These resources are FREE to use and customise to help your productivity.
NOTE: Resources on this page are subject to change as I am constantly updating them with new knowledge and attempting to keep up with evolving technology. These resources are not a substitute for your own experience and do not necessarily reflect your organisational context.
To download a resource, simply click on the icon to the right of the item description.
Use the icons also for downloading high-quality versions of image files (in .SVG format). You should be able to view them in a standard brower. To view the image on a mobile, click the .PNG link instead.
If there’s something specific you’re looking for, drop me an email and I’ll post a template (if I’ve got one).
Security Architecture Engagement Checklist (.xlsx spreadsheet)
Useful checklist for security architecture kick-off meetings, engagement with other IT architecture and engineering disciplines, evaluation of projects and recording go/no-go decisions.
Threat Modelling Template (.xlsx spreadsheet)
Provides a basic threat modelling template for listing solution components, identifying potential security threats and deriving security requirements. Leverages STRIDE, DREAD and risk management principles.
Container Security “Cheat Sheet” (image file)
Provides high-level discussion points for the most common container orchestration technologies including Docker and Kubernetes. Also looks at orchestration technologies currenly provided by AWS and Azure.
Download .PNG version
API Security “Cheat Sheet” (image file)
Quick reference guide to APIs with basic definitions for the most common API technologies including REST, SOAP, GraphQL and gRPC. Provides an overview of best practices for API security and a mapping to the ‘OWASP Top 10 API Security Risks‘.
Download .PNG version
Email Security – SPF, DKIM and DMARC (image file)
Quick reference guide for security architects and designers discussing email authentication protocols – SPF, DKIM and DMARC- with project teams.
Download .PNG version
Software Vulnerability and Defect Management (image file)
Sample workflow for teams responsible for application/software/code/IaC security. This resource looks at vulnerability management within the context of a typical SDLC. Control references include the NIST Cybersecurity Framework, ISO 27002:2022, PCI DSS, and CIS Critical Security Controls.
Download .PNG version
Security Design Principles (source – NCSC) (image file)
I adapted the NCSC Secure Design Princples into this useful mindmap. I find this a helpful tool during my initial engagement with projects at the stage where we’re establishing security princples. Combine this with the Security Architecture Engagement Checklist (see above) for your project management.
Download .PNG version