External Resources
Checklists, security tools and training from official and well-known sources, in short tables. Not rankings; no affiliate links.
Checklists
| Topic | What you will find | Links |
|---|---|---|
| Governance & Risk Frameworks | Official risk and control frameworks: what to check at the organisation level. | 7 |
| System Hardening | Configuration baselines and benchmarks for operating systems, cloud and network devices. | 3 |
| App, API & Mobile Security | Verification standards and top-ten lists for web apps, APIs, mobile apps and AI applications. | 5 |
Tools
| Topic | What you will find | Links |
|---|---|---|
| Identify: assess and anticipate | Know your weaknesses and threats: vulnerability scanning, penetration testing, threat intelligence and cloud posture (NIST CSF: Identify). | 25 |
| Protect: prevent and control | Prevent attacks and control access: identity, privileged access, network, firewalls, WAF, email, data and code (NIST CSF: Protect). | 51 |
| Detect: monitor and alert | Spot attacks in progress: SIEM, endpoint detection and database monitoring (NIST CSF: Detect). | 24 |
| Respond and recover | Contain and investigate: automation, managed response services and malware analysis (NIST CSF: Respond and Recover). | 20 |
| AI Security & Guardrails | Protect AI systems and the data that flows into them: guardrails, usage control, red-teaming and model scanning. | 14 |
| AI Platforms & Developer Tools | Foundation models, multi-model platforms, coding assistants and the tooling to evaluate and operate AI. | 20 |
| SEO & AI Visibility Tools | Tools for search visibility and for tracking whether AI assistants cite you. | 10 |
| Gartner Magic Quadrants | What a Gartner Magic Quadrant is, how to read one, and where to find the security quadrants. | 5 |
Training & Certifications
| Topic | What you will find | Links |
|---|---|---|
| AI | Courses and credentials for learning AI and AI governance, from the providers themselves. | 7 |
| Cloud Security | Cloud security certifications from the cloud providers and independent bodies. | 5 |
| Cyber Security | Security certifications from entry level to leadership and hands-on testing. | 6 |
| Quantum | Where to learn quantum computing and post-quantum cryptography. | 3 |
| ISO, Audit & Governance | Courses and certifications for ISO auditing, IT audit, governance and security. | 5 |