14 of 14 resources
Playbook · Intermediate
Ransomware response
What to do when an attacker encrypts files or systems and demands payment.
Version 1.0 · reviewed Oct 11, 2026
Playbook · Basic
Phishing response
What to do when a fake email, message or site arrives that is trying to steal credentials or install malware.
Version 1.0 · reviewed Oct 11, 2026
Playbook · Intermediate
Business email compromise (BEC)
What to do when someone impersonates an executive or a vendor to divert a payment, or when a real email account is used for that purpose.
Version 1.0 · reviewed Oct 11, 2026
Playbook · Advanced
Denial-of-service attack (DDoS)
What to do when a site or service stops responding because it is being flooded with traffic.
Version 1.0 · reviewed Oct 11, 2026
Playbook · Intermediate
Data leak or exposure
What to do when personal or confidential information is left exposed, was copied without authorization or turns up published.
Version 1.0 · reviewed Oct 11, 2026
Playbook · Basic
Compromised account
What to do when someone takes control of an email, social media or WhatsApp account, or an account on an internal system.
Version 1.0 · reviewed Oct 11, 2026
Standard · Intermediate
ISO/IEC 27001 overview
ISO/IEC 27001 is the international standard for managing information security.
Version 1.0 · reviewed Oct 11, 2026
Standard · Intermediate
NIST CSF 2.0 overview
The NIST Cybersecurity Framework organizes everything an organization does to manage its cybersecurity risk into six functions that are easy to explain to management.
Version 1.0 · reviewed Oct 11, 2026
Standard · Basic
CIS Controls
The CIS Controls are a prioritized list of concrete actions against the most common attacks.
Version 1.0 · reviewed Oct 11, 2026
Standard · Advanced
PCI DSS
PCI DSS is the security standard for anyone who stores, processes or transmits payment card data.
Version 1.0 · reviewed Oct 11, 2026
Standard · Advanced
SIB regulations on technology risk
The Junta Monetaria (Monetary Board) issued the Reglamento para la Administración del Riesgo Tecnológico (Regulation for Technology Risk Management, Resolution JM-102-2011), which the Superintendencia de Bancos (SIB, the banking regulator) supervises.
Version 1.0 · reviewed Oct 11, 2026
Standard · Basic
Ley de Acceso a la Información Pública (Access to Public Information Law)
The Ley de Acceso a la Información Pública (Access to Public Information Law, Decree 57-2008) guarantees every person's right to access information held by the State and, at the same time, protects the personal data that public entities keep.
Version 1.0 · reviewed Oct 11, 2026
Guide · Basic
Basic security for small businesses
Ten low-cost measures that stop most attacks against small businesses.
Version 1.0 · reviewed Oct 11, 2026
Guide · Advanced
Installing the cert.gt sensor
How to install T-Pot in Sensor mode and link it to the central node.
Version 1.0 · reviewed Oct 11, 2026