brivellisBIA and RTO/RPO: the numbers IT cannot set alone
How a business impact analysis sets the MTPD, RTO and RPO, why IT cannot set them alone, and how one number should run from the BIA to the exercise report.
Read the insightFree templates, free courses and tools for IT service management, cybersecurity, resilience and governance
Editable templates with a worked example in every file, built on international standards and written for teams worldwide.
Free template kits
One kit per standard. Each card shows its size and version.
IT Service Management
SMS Starter Kit for ISO/
Free · 17 files · v1.1
Scope, policy, SLA, plan and review templates with a worked example.
Cybersecurity & Compliance
Cybersecurity Awareness Programme Kit
Free · 11 files · v1.0
Policy, 12-month plan, module outlines and evidence register.
Business Resilience
BCMS Starter Kit for ISO 22301
Free · 14 files · v1.0
BIA workbook, continuity plan, IT DR runbook and exercise pack.
Cybersecurity & Compliance
ISMS Starter Kit for ISO/
Free · 13 files · v1.0
Scope, policy, risk register, SoA skeleton and audit plan.
What's inside every kit
Editable templates
Documents and workbooks you adapt to your organisation.
A worked example
One fictional company, filled in across every file.
Clause references
Each template points to the clause it supports, in our own words.
AI prompt pack
Guardrailed prompts to tailor drafts, with an AI-use log.
Version and sources
Version, review date and the source editions on every kit.
A read-me that guides you
What to fill in first, and what to leave for later.
Why teams start here
Free, with no sign-up
Download directly. We do not collect your email.
A set you can finish
A starter set sized for a small team, not a document dump.
Learn as you build
Free courses walk through the kits step by step.
Kept current
Visible versions, with a route to report errors.
Responsible AI built in
A human decides. Every AI draft is labelled and logged.
Four domains we cover
IT Service Management
Running IT services well, from ITIL® practices to an ISO/IEC 20000-1 service management system.
Cybersecurity & Compliance
Building and evidencing a security programme that auditors and regulators can follow.
Business Resilience
Keeping critical services running through disruption, from impact analysis to recovery.
Governance & Risk
How organisations decide, prioritise and stay in control as technology changes.
Latest insights
NIST CSF 2.0 explained: how to answer it from the ISO/IEC 27001 system you already run
NIST CSF 2.0 in plain terms: the six functions, what changed in version 2.0, and how an ISO/IEC 27001 ISMS answers it without a second control set.
Read the insightISO/IEC 27090 is out: how the new AI security standard fits with ISO/IEC 42001
ISO/IEC 27090:2026 gives guidance on AI-specific security threats. Here is how it differs from ISO/IEC 42001 and how to use the two together.
Read the insightQuestions
Are the kits really free?
Yes. There is no sign-up and we do not ask for your email.
Can we use them inside our organisation?
Yes, within one organisation. Resale and redistribution are not allowed.
Do the kits include the text of the standard?
No. They reference clause numbers and paraphrase. You need your own licensed copy of the standard.
How do I report an error?
Write to [email protected]. Corrections ship in the next version.