Compliance & Cybersecurity Studio
Practical templates, checklists, and frameworks that help startups and SMBs stay compliant with NIS2, GDPR, and DORA — without hiring a consultant.
Products
Editable Word, Excel and PowerPoint templates for NIS2, DORA, GDPR, ISO 27001 and AI governance. One-time purchase, instant download.
All 11 products in one package — 76 files covering NIS2, GDPR, DORA, ISO 27001, incident response, vendor security, and privacy.
$444$199
79-control NIS2 gap assessment workbook, incident response plan template, supply chain security policy, board briefing deck.
60-control DORA gap assessment by pillar with article references, ICT incident classification matrix, ICT risk management framework template, third-party provider register.
Statement of Applicability (93 controls), risk register with 5x5 matrix, audit checklist, management review, ISMS scope, asset inventory.
90-day security roadmap, patching, backup and access review procedures, incident response plan, training outline, asset inventory, metrics dashboard and questionnaire answers.
Board briefing presentation, management liability summary, compliance budget template, board resolution, quarterly report template, 12-month roadmap.
Master incident response plan, 6 scenario playbooks (ransomware, data breach, BEC, DDoS, insider, third-party), regulatory notification templates, tabletop exercises, classification matrix.
94-question vendor questionnaire with auto-scoring, GDPR data processing agreement, risk register, security requirements addendum, exit plan.
7 ready-to-customize security policies (InfoSec, Acceptable Use, Password, Data Classification, Remote Work, Vendor, Incident Response), a business continuity plan template and an implementation checklist.
72-hour notification checklist, breach impact assessment matrix, breach register, authority and data subject letter templates, lessons-learned template.
Controller and processor RoPA templates, data inventory workbook, legitimate interest assessment, consent record template, completion guide.
DPIA template, screening checklist and register, transfer impact assessment, data protection by design checklist, DPO consultation record.
AI agent use policy and register, delegation and permissions matrix, risk assessment workbook, vendor questionnaire, DPIA, incident playbook, executive report.
57-check MCP audit workbook, server and tool inventory with exposure check, threat model, audit report template.
NIS2 Starter + GDPR Breach + Security Policies + DORA — 23 files
$99
Cybersecurity Starter + Security Policies + GDPR Breach — 26 files
$89
ISO 27001 Toolkit + Security Policies — 16 files
$99
AI Agent Governance + MCP Audit Kit + Vendor Security — 18 files
$79
Free Tools
Assess, calculate, and generate — no signup required. All tools run in your browser.
Guides
Each guide puts our articles in reading order, with the free tools and templates for it.
Everything on the NIS2 Directive in one place: whether it applies, the Article 21 measures, incident reporting, board duties, fines and supply chain rules.
DORA · 10 articlesEverything on DORA in one place: who it applies to, the 59 requirements, incident classification, the register of information, contracts, testing and exit plans.
GDPR · 23 articlesA practical GDPR guide for companies: lawful bases, records of processing, privacy notices, DPIAs, processors, transfers, data subject rights, breaches and fines.
Cyber Resilience Act · 5 articlesEverything on the EU Cyber Resilience Act in one place: reporting since 11 September 2026, the Annex I requirements from December 2027, open source, and how it relates to NIS2.
AI Act and AI agents · 12 articlesThe EU AI Act after the 2026 Digital Omnibus and the practical side of AI agents: AI literacy, transparency, GDPR, vendor checks, security and incident response.
Security for startups and SMEs · 13 articlesPractical cybersecurity for small companies: the first 20 controls, policies, incident response, vendor risk, security questionnaires, pentests, backups and training.
About
ClevSec is an independent cybersecurity tools studio. We build practical, no-nonsense compliance resources that help real businesses meet real regulations.
Every template, checklist, and framework is grounded in actual regulatory text — NIS2 (EU 2022/2555), GDPR (EU 2016/679), and DORA (EU 2022/2554). No fluff, no filler.
Our tools are used by security professionals, compliance officers, and startup founders across Europe and beyond.