South Africa GCA Cybersecurity Toolkit - GCA Cybersecurity Toolkit | Tools and Resources to Improve Your Cyber Defenses

In partnership with:

Protect your business from cyber threats with our free Cybersecurity and Data Protection Toolkits

Small, Medium and Micro-sized Enterprises (SMMEs) have become easy targets for cyber attacks due to the lack of understanding of how to secure their businesses and themselves. This cybersecurity toolkit allows SMMEs to access free products from trusted cybersecurity companies to improve their security.

Anyone with or without computer knowledge can access and implement these resources on any computer, smartphone or tablet. You can select the tools that best suit your business’ needs.

Take Steps to Protect Your Business From Cyber Threats

Know What
You Have

Devices and Applications

Discover tools that help you identify and assess your devices so you can take the proper steps to secure them.

Update Your
Defenses

Updates, Patches and Vulnerability Management

Boost your digital immunity by implementing tools that automatically update your systems and applications.

Beyond Simple Passwords

Passwords and Two-Factor Authentication

Safeguard your accounts by learning how to create stronger passwords and adding additional layers of protection.

Prevent Phishing
and Malware

DNS Filters, Anti-Virus and Ad-Blockers

Protect against malicious attacks with advanced tools that help you navigate the internet safely.

Backup and Recover

System Backups

Discover tools that help you routinely backup your data and easily restore it.

Protect Your Email
And Reputation

Email Authentication and Brand Monitoring

Explore tools that protect your email domain and brand name from being misused by attackers.

Take Steps to Protect Your Data

Below you will find a library of templates to support your journey aligning to the Protection of Personal Information (POPI) Act. This includes process documentation and policy templates. First, start by downloading and reading our POPI Toolkit Guidance document.

POPI Toolkit
Guidance

Download this guide

This guide provides steps that can help SMMEs develop the culture, processes and documentation required to work towards compliance with the legislation and effectively manage the risks associated with data protection.

POPI Act
Checklist

Download this checklist

This is a summary checklist of the 8 conditions which need to be satisfied as minimum requirements in order for SMMEs to work towards POPI compliance.

Privacy Notice
Statement Template

Download this template

This template can be used by the organisation to assist in the creation of a Privacy Notice which can be administered to Data subjects and also used to request their consent.

Acceptable Use
Policy Template

Download this template

This policy, developed by the SANS Institute (free to use), describes the practices and constraints that a user must agree to in order to gain access to a corporate network or use company-owned devices.

Data Privacy
Policy Template

Download this template

This policy should be used by the business to outline the scope of the information that will be collected, where and how the information will be collected, and how the business will ensure that the information is kept confidential and secure.

Breach Notification
Letter Template

Download this template

This letter should be completed in the event that there is a breach of access to a part or a whole of personal information collected, used and/or stored by the business. The letter should contain detail the breach, how it impacts the owner(s) of the data and the investigation process that Company X is following to prevent harm to the respective owners and to prevent any further breaches.

Information Asset
Register Template

Download this template

This is a repository of the company’s Information Assets; either physical or virtual. It is important that this register is kept up-to-date and contains accurate information.

Data Collection
Policy Template

Download this template

This policy should be used by the business as a guide when collecting personal information from different people and/or businesses and should contain details of the type of data collected, the specific purpose of collecting the data and how the data will be stored and disposed.

Retention
Policy Template

Download this template

This policy should be used to ensure that records on Personal Information is properly retained and destroyed in accordance with legal, regulatory and company requirements.

Records of
Destruction Template

Download this template

This template can be used to record all personal information records that are destroyed.

Sensitive Information
Policy Template

Download this template

This policy should be used by the business as a guide when determining what personal
information can be shared with people and/business outside the company.

Records of Processing
Activities Template

Download this template

This is an inventory of the data processing done by the business. It also provides an overview of all business activities concerning personal data.

Information Security
Policy Template

Download this template

This policy should be used as a guide to outline how personal information collected by Company X will be secured and protected.

Privacy and Information Security
Risk Register Template

Download this template

This is a document that record’s the company’s identified privacy and information security risks, the likelihood and consequences of a risk occurring and the mitigation actions that are being taken to reduce the impact of the risk.

Opt-In
Form

Download this template

This template should be used by the Data Subject to record consent to opt-in to direct marketing.

Opt-Out
Form

Download this template

This form should be made available to the Data Subject. When the Data Subject sets out an opt-out choice, it is recorded against their records and will remain unless the Data Subject changes their mind.

Exercise in a Box is an online tool from the UK’s NCSC which helps organisations test and practise their response to a cyber attack. It is completely free and you don’t have to be an expert to use it. The service provides exercises, based around the main cyber threats, which your organisation can do in your own time, in a safe environment, as many times as you want. It includes everything you need for setting up, planning, delivery, and post-exercise activity, all in one place.

Try the Exercise in a Box

Protect your business from cyber threats with our free Cybersecurity and Data Protection Toolkits

Take Steps to Protect Your Business From Cyber Threats

Know What You Have

Update Your Defenses

Beyond Simple Passwords

Prevent Phishing and Malware

Backup and Recover

Protect Your Email And Reputation

Take Steps to Protect Your Data

POPI Toolkit Guidance

POPI Act Checklist

Privacy Notice Statement Template

Acceptable Use Policy Template

Data Privacy Policy Template

Breach Notification Letter Template

Information Asset Register Template

Data Collection Policy Template

Retention Policy Template

Records of Destruction Template

Sensitive Information Policy Template

Records of Processing Activities Template

Information Security Policy Template

Privacy and Information Security Risk Register Template

Opt-In Form

Opt-Out Form

Tool Types

Time

Tool Levels

Level 1

Level 2

Level 3

Level 4

Support

Know What
You Have

Update Your
Defenses

Prevent Phishing
and Malware

Protect Your Email
And Reputation

POPI Toolkit
Guidance

POPI Act
Checklist

Privacy Notice
Statement Template

Acceptable Use
Policy Template

Data Privacy
Policy Template

Breach Notification
Letter Template

Information Asset
Register Template

Data Collection
Policy Template

Retention
Policy Template

Records of
Destruction Template

Sensitive Information
Policy Template

Records of Processing
Activities Template

Information Security
Policy Template

Privacy and Information Security
Risk Register Template

Opt-In
Form

Opt-Out
Form