AI Security Assessment Toolkit
The checklist tells you where to look. The toolkit is what you hand back: a threat-model worksheet, a risk register with scoring, a control map to OWASP and NIST, an evaluation plan and a report template, with a worked fictional example of each.
8 files XLSX · DOCX · PDF Instant download Updates for 12 months
One-time payment · secure checkout by Kit/Stripe · all sales final · licence for one organisation
What's included
| File | What it is | Format |
|---|---|---|
| 01 README: how to run a review | Order of work, one-day time budget, roles, what to hand back | |
| 02 AI system inventory and data-flow questionnaire | One row per AI system; 13 questions that feed the threat model | XLSX |
| 03 Threat-model worksheet | Scope, sources and tools, trust boundaries, assets, threat table, scoring definitions | DOCX |
| 03b Threat table | 15 seeded threats (OWASP LLM 2025/2026 and agentic risks) with Likelihood × Impact formulas | XLSX |
| 04 Risk register | Checklist results sheet, register with residual scoring, formula-driven summary | XLSX |
| 05 Control mapping | 28 checks mapped to OWASP 2025 and 2026, NIST AI RMF, NIST AI 600-1 and SP 800-53 families, with a crosswalk | XLSX |
| 06 Evaluation plan | Ten adversarial test cases, payload library, results log | DOCX |
| 07 Assessment report template | Two-page report for the sign-off owner plus appendices, fully completed example | DOCX |
Every file includes a completed example for "Ask HR", a fictional benefits assistant at a fictional insurer, so you can see the expected depth before you fill in your own.
Who it's for
Security practitioners, consultants and managers who own the review of an LLM-based application and need to turn a list of Yes, Partial and No into risks, owners and a report. If you have run the free checklist, you already know the depth to expect.
What it is not
It is not a compliance attestation or a certification, and it is not legal advice. It does not recommend vendors or products. The controls it describes reduce the likelihood and impact of prompt injection and related risks; nothing eliminates them.
FAQ
Is it updated? Yes. Buyers receive updated files for 12 months when the referenced guidance changes (OWASP, NIST, CISA).
Which standards is it mapped to? OWASP Top 10 for LLM Applications 2025 and the 2026 edition, OWASP Top 10 for Agentic Applications, NIST AI RMF 1.0 and AI 600-1, NIST SP 800-53 Rev. 5 control families.
Can my team share it? Within one organisation, yes. Not for resale or republishing.
What if a file is broken? Reply to the purchase email and it will be fixed or replaced.
Refunds? No. Delivery is instant, so sales are final; the previews above and the free checklist exist so you can judge the depth first.
Get the toolkit
$59 one-time. Instant download, receipt by email, re-download any time.
Get the toolkit — $59Questions before buying? Use the contact page. See our disclosures and privacy policy.
