Built by a Certified Security Engineer

GRC toolkits that
actually save
your time

Professional-grade NIST CSF 2.0, NIS2, and DORA compliance toolkits. What takes consultants 2 weeks — ready in 2 hours.

NIST CSF 2.0
NIS2 Directive
DORA Regulation
ISO 27001
Browse All Products → See What's Included
NIST CSF 2.0
Assessment Pack
106 controls · 7-tab Excel · PDF guide
$197
NIS2 + DORA
Compliance Bundle
79 requirements · 8 policy templates · PDF guide
$197
Best Value
Complete GRC Kit
Everything above · 2 Excel + 2 PDF + 8 Word
$297 Save $97
⚡ Instant download after purchase
🔄 Free lifetime updates
🔒 Secure checkout via Lemon Squeezy
🛠 Built by a certified security engineer
📋 Ready to use in under 2 hours
The Problem

Building GRC frameworks
from scratch is brutal

Every security team faces the same three problems when tackling NIST, NIS2, or DORA compliance.

01
It takes weeks
Mapping 106 NIST controls or 79 NIS2/DORA requirements from scratch — with scoring criteria, gap analysis, and board reporting — takes 15–20 hours minimum. Nobody has that time.
02
Consultants charge thousands
A Big 4 firm charges $5,000–$15,000 for a NIS2 gap assessment. A NIST CSF engagement runs $2,000–$5,000. Most teams can't justify the budget — especially for a first assessment.
03
The frameworks are complex
NIST CSF 2.0 added a new GOVERN function. NIS2 Article 21 has 10 domains. DORA has 5 pillars across 45 articles. Even experienced engineers struggle to know where to start.
The Solution

Three toolkits.
Every major framework.

Professional-grade assessments built by an engineer who uses these frameworks daily.

NIST CSF 2.0
Assessment Pack
Complete gap analysis toolkit covering all 106 subcategories with automatic scoring, radar chart, and triple framework mapping.
$197
  • ✓
    7-tab Excel workbook — Dashboard, Assessment, Scoring Guide, Gap Analysis, Radar Chart
  • ✓
    106 controls across 6 functions (GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, RECOVER)
  • ✓
    Scoring criteria for every control — levels 0, 1, 3, 4, 5
  • ✓
    ISO 27001:2022 cross-mapping (103 rows)
  • ✓
    SP 800-53 Rev 5 cross-mapping (288 rows — for FedRAMP, FISMA, CMMC)
  • ✓
    16-page PDF user guide with remediation roadmap
Get NIST CSF Pack →
NIS2 + DORA
Compliance Bundle
Full gap assessment for both EU regulations plus 8 ready-to-approve security policy templates covering every key domain.
$197
  • ✓
    NIS2 gap assessment — 36 requirements (Article 21), all 8 domains
  • ✓
    DORA gap assessment — 43 requirements (Articles 5–45), all 5 pillars
  • ✓
    NIS2 × DORA cross-mapping — 15 overlaps, assess once for both
  • ✓
    8 Word policy templates — Risk, IR, Access, BCP, Supply Chain, Crypto, Training, Vuln
  • ✓
    PDF guide with 24h/72h/4h notification timeline references
  • ✓
    3-phase remediation roadmap (0–30, 30–90, 90–180 days)
Get NIS2/DORA Bundle →
Best Value Save $97
Complete GRC Kit
Both toolkits combined. Every framework, every deliverable. The complete toolkit for serious GRC teams and consultants.
$297
$394
Save $97
  • ✓
    Everything in NIST CSF 2.0 Assessment Pack
  • ✓
    Everything in NIS2/DORA Compliance Bundle
  • ✓
    2 Excel workbooks + 2 PDF guides + 8 Word policies
  • ✓
    NIST CSF ↔ ISO 27001 ↔ SP 800-53 triple mapping
  • ✓
    NIS2 × DORA cross-mapping to eliminate duplicate work
  • ✓
    Lifetime updates as frameworks evolve
    • Get Complete GRC Kit →
    Why SecOpsKit

    Built by an engineer,
    not a consultant

    These aren't theoretical templates — they're tools built by someone who runs NIST and NIS2 assessments in production environments.

    ⏱
    Save 15–20 hours
    What takes a consultant two weeks to build from scratch — scoring model, formulas, radar chart, gap analysis — is ready to open and use today.
    ⚖️
    Regulatory accuracy
    Every requirement is mapped to the correct article: NIS2 Art.21, DORA Art.5–45, with ISO 27001 and SP 800-53 cross-references built in.
    📊
    Board-ready output
    Radar charts, RAG dashboards, and executive summaries that go straight into your board deck. No extra formatting needed.
    🔄
    Free lifetime updates
    As NIST CSF evolves and NIS2 implementing acts are published, your toolkit gets updated automatically via Lemon Squeezy.
    🛡
    Proven methodology
    Scoring criteria based on CMMI maturity levels (0–5), consistent with how Big 4 and government agencies approach maturity assessment.
    💼
    Consultant-ready
    GRC consultants use these to deliver $2,000–$5,000 assessments for clients. One purchase pays for itself on the first engagement.
    Comparison

    SecOpsKit vs the alternatives

    Feature
    SecOpsKit
    Build it yourself
    All 106 NIST CSF 2.0 controls scored
    ✓
    15–20h work
    Scoring guide with criteria per control
    ✓
    Research required
    Auto-calculated RAG dashboard
    ✓
    Excel skills needed
    ISO 27001 + SP 800-53 cross-mapping
    ✓
    Days of mapping work
    NIS2 Article 21 gap assessment
    ✓
    Legal research needed
    DORA Articles 5–45 gap assessment
    ✓
    Legal research needed
    8 policy templates (Word, ready to approve)
    ✓
    Days of writing
    Total time to first deliverable
    2 hours
    2–4 weeks
    Cost
    $197–$297
    $2,000–$15,000
    About

    Built by someone who does this every day

    SecOpsKit products are created by a working network and security engineer — not a content marketer.

    Network & Security Engineer
    10+ Years Experience
    Cisco · FortiGate · Zscaler
    NIS2 · DORA · ISO 27001
    NIST CSF · SP 800-53

    I'm a network and security engineer with over 10 years of hands-on experience managing enterprise security infrastructure — firewalls, SWG, endpoint protection, and GRC programs. I built SecOpsKit because I kept rebuilding the same spreadsheets and documents from scratch for every client and employer.

    Every toolkit in this store is something I actually use or have used in production environments. The NIST CSF scoring criteria, the NIS2 notification timelines, the policy templates — all based on real-world implementations, not just reading the specs.

    If you're a CISO, GRC consultant, or security engineer who needs to get compliance work done without spending weeks building from scratch — SecOpsKit is for you.

    FAQ

    Common questions

    What format are the files?
    The assessments are Excel (.xlsx) — compatible with Microsoft Excel and Google Sheets. Policy templates are Word (.docx). Guides are PDF. Everything is delivered as a ZIP archive.
    Do I need any special software?
    Microsoft Excel 2016+ or Google Sheets for the workbooks. Microsoft Word or Google Docs for the policy templates. Any PDF reader for the guides. No plugins or subscriptions required.
    Are these templates compliant with current regulations?
    Yes. The NIS2 assessment covers Directive (EU) 2022/2555 as applicable from October 2024. DORA covers Regulation (EU) 2022/2554 applicable from January 2025. NIST CSF 2.0 covers the February 2024 version of the framework. All tools are updated as implementing acts are published.
    Can I use these for client work?
    Yes — a single purchase covers use with your own organization and with clients. GRC consultants commonly use these to accelerate client assessments. You may not resell the templates as your own product.
    What if I only need one framework?
    Buy the individual toolkit — NIST CSF Pack ($197) or NIS2/DORA Bundle ($197). The Complete GRC Kit ($297) is the best value if you need both.
    How are updates delivered?
    Updates are delivered through your Lemon Squeezy download page. You'll receive an email when a new version is available. Updates are free for life.

    Start your assessment
    in the next 10 minutes

    Instant download. No subscription. Free updates forever.

    Browse All Products → Get Complete GRC Kit — $297