One of the great things about the work I do is that I am exposed to a lot of free resources that I can then pass on to you.
I was in Ottawa last week attending a conference held at the Canadian Centre for Cyber Security. (For those who might not have heard of them before, the CCCS is a government organization that provides advice and information to Canadians and Canadian organizations and businesses on cybersecurity. They are fantastic people: knowledgeable, helpful, and client-oriented. If there is a bigger supporter of the CCCS out there, I want to know who they are and why they are a bigger supporter than me.)
Here is a page from the CCCS website that “provides resources from the Cyber Centre to help Canadian organizations and critical infrastructure increase their cyber security readiness. This includes information on current cyber threats, steps to protect against them and ways respond to and recover from incidents.”
Here is a page that introduces their publication “Cyber Security Readiness Goals: Securing Our Most Critical Systems“
And here is the page for their “Cross-Sector Cyber Security Readiness Goals Toolkit.”
The CRG was published at the end of October this year, so this information is very fresh.
I hope you find it useful, or know someone who will.