Frequently asked questions

Yes — that's exactly who we build for. Every product is written in plain English for business owners, not IT professionals. If you can open a Word document or use a basic desktop program, you can implement CyberSafe products. No technical background required.

If your budget allows, start with the Compliance Suite — it includes all 16 policies, all 9 trackers, the desktop application, and 12 months of training materials in one download. If you need to start at a lower price point, the Starter Kit gives you the four core policies and two trackers to get your foundation in place. Either way, most businesses are up and running within a single business day.

Most businesses have their policy suite in place within a single business day. The policies are ready to use — you add your business name, review them, and distribute to your team. Each kit also includes an implementation guide to walk you through the process step by step.

The Compliance Suite already includes all 16 policy documents from the Enterprise Kit, plus all 9 trackers, the desktop application, and training materials — so you do not need to buy a kit if you're purchasing the Suite. The policy kits are for businesses who want just the written documents without the application, or who need to start at a lower price point.

Yes, completely. Every tier includes everything from the tier below. Tier 2 includes all of Tier 1. Tier 3 includes all of Tiers 1 and 2. You never pay twice for the same content, and you never need to buy a lower tier separately.

Everything is a one-time purchase with no recurring fees. Policy kits, the Compliance Suite, and the Annual Security Awareness Training Suite are all one-time downloads — no subscriptions, no monthly charges.

The Starter Kit is designed for 1–10 employees. The Professional Kit covers 11–50 employees. The Enterprise Kit covers 51–100 employees. The Compliance Suite works for any size in that range. These are guidelines — if you're a 5-person business that handles sensitive customer data, the Professional Kit or Suite might be the better fit.

All products are delivered as instant digital downloads. After checkout you'll receive an email with your secure download link. No waiting, no shipping — everything is available immediately.

Policy documents are delivered as editable Word (.docx) files. Tracking spreadsheets are delivered as Excel (.xlsx) files. Training decks are delivered as editable PowerPoint (.pptx) files. The Compliance Suite is delivered as a Windows desktop application with a quick-start guide. Everything arrives in a clearly organized zip file immediately after purchase.

Yes. Every policy document has a designated field for your business name. Because they're delivered as editable Word documents, you can also add your logo, adjust colors, and customize any section to match your business. They're yours to use as you see fit.

"NIST CSF 2.0 aligned" means our products are designed to address the six core functions of the NIST Cybersecurity Framework version 2.0: Identify, Protect, Detect, Respond, Recover, and Govern. We use that framework as our blueprint. We never claim "NIST compliant" or "NIST certified" — those terms imply a formal certification process that doesn't exist for CSF.

No. CyberSafe Compliance Solutions is not affiliated with, endorsed by, or officially connected to the National Institute of Standards and Technology (NIST). We are an independent company that builds products aligned to publicly available NIST frameworks.

No. We've done the framework research so you don't have to. The products are designed so that following them naturally results in NIST CSF 2.0 alignment — you don't need to understand the framework itself to benefit from it.

Our products provide the documented policies and compliance records that most cyber insurers ask for during underwriting. Having a written password policy, acceptable use policy, incident response plan, and risk register puts you in a much stronger position. However, every insurer has their own requirements — always verify what yours specifically requires.

In most cases, yes. Our policy kits cover the most commonly requested documents — password policy, AUP, incident response plan, data classification, remote work, and vendor risk management. The Compliance Suite also generates exportable PDF reports you can hand directly to underwriters. If you're unsure which product matches your insurer's requirements, contact us before purchasing.

The Compliance Suite is a local application (downloaded to your device) with nine modules: a compliance dashboard with a live 0–100% score, policy manager, risk register, vendor tracker, 12-month training calendar, incident log, asset inventory, employee acknowledgments, and PDF/CSV audit exports. It's the tool you use to manage your compliance posture day to day.

No. The current version of the Compliance Suite is a local application — all your data stays on your own device. Nothing is transmitted to external servers. A cloud-hosted version is planned for a future release.

Yes, completely normal. Windows SmartScreen shows this prompt for new software from publishers without a large download history. Click "More info" then "Run anyway" to proceed. The installation guide included with your download covers this step. The warning is about publisher recognition, not the safety of the software.

No — the Compliance Suite already includes all the policy documents. You do not need to buy a kit separately. The policy kits are a standalone option for businesses that want written documents without the application.

It's a set of 12 fully editable PowerPoint presentation decks — one for each month of the year. Each deck covers a different cybersecurity topic your team needs to know about: phishing, ransomware, passwords, physical security, vendor risk, social engineering, mobile device security, and more. You download all 12 at once and deliver them to your team at your own pace.

No. The decks are designed to be straightforward to present — even if you've never run a training session before. You can walk through the slides in a team meeting, share them via email for self-review, or print them as handouts. Each deck includes speaker notes to guide you through the content.

Yes — all 12 decks are fully editable PowerPoint files. You can add your logo, change colors to match your brand, edit any slide content, and remove anything that doesn't apply to your business. They're yours to use however works best for your team.

Not exactly. The Compliance Suite includes a training tracker module where you can upload training materials, log completion, and add notes — but the actual PowerPoint training decks are not included. Those are sold separately as the Security Awareness Training Suite ($97). The two work well together — buy the Training Suite to get the decks, then upload them into the Compliance Suite's training module to track your team's progress.

Because our products are digital downloads delivered instantly, all sales are final. We encourage you to review the full product descriptions carefully before purchasing. If you have any questions about whether a product is right for your business, please contact us before buying — we're happy to help you decide.

Each purchase is licensed for a single business. If you need to implement these products across multiple businesses, please contact us to discuss options.