I run IT and security at a venture-backed fintech. Around 500 people, real regulatory exposure, real auditors, a real board that asks real questions.
I'm not using my name here, and you deserve to know why: my employer doesn't need the attention, and a security leader moonlighting under their own byline invites questions neither of us needs to answer. That's the whole reason. There isn't a more interesting one.
What I can tell you is where this came from. I built the first version of this workbook for myself, because I'd inherited a security function that didn't exist yet and had ninety days to show a board a plan. What I could find at the time was either a 400-row compliance checklist that told me nothing about sequencing, or a consultant quote for $38,000. I built the thing in between. Then I rebuilt it four more times as I learned which parts of it survived contact with a CFO.
Cyber Plan is that fifth version. The budget ranges in the control library are the ones I've actually paid or been quoted in the last two years. The sequencing logic — identity first, always — is what I'd tell any peer over coffee. The two example roadmaps are fictional companies built from patterns I've seen repeatedly at this size.
Anonymous digital products deserve suspicion. Most of them are AI-spun filler with a payment link. So don't take my word for any of this:
Read it before you pay. The free pitch script is a complete chapter of the kit, not a sample. Judge the whole thing by it — that's what it's there for.
Get your money back easily. 14 days, no questions, one email. No form, no exit survey, no "let me understand your concerns." You keep the files either way. Refund policy →
Check the specifics. Every tool in the control library is named, with a price range. Go price two of them. If the numbers hold up, the rest probably does too. If they don't, don't buy.
It isn't a compliance certification, an audit, or a substitute for counsel when regulation requires counsel. It's a planning kit that gets a competent IT lead from nothing to a defensible 12-month plan they can present without flinching. That's a real problem, narrowly solved.
hello@mycyberplan.com — I read everything.