About Grey Mouse Studio

Grey Mouse Studio is a cybersecurity practice led by a CISSP-certified security leader. We turn hands-on experience of running security programs into ready-to-run program kits, so security teams and consultants can spend their time securing the business instead of rebuilding trackers, procedures and slide decks.

Why we exist

Most security programs don't fail for lack of tools. They stall because the operating basics are missing or scattered: no agreed SLAs, an SOP nobody has updated since the last audit, metrics rebuilt by hand every month and leadership updates that run to 40 slides. We build the working documents a mature program runs on, so you can start from something proven.

What we build

Each cybersecurity program kit covers one security domain and includes:

• An Excel tracker and KPI dashboard with owners, SLAs, a risk register and a self-updating dashboard.
• A ready-to-adopt SOP with RACI, procedures, escalation paths and cited sources.
• Leadership decks from the daily stand-up to the Steering Committee, plus a solution deck to win budget.

There are 16 domains: SOC, incident response, vulnerability management, identity and access management, cloud, endpoint, email, data loss prevention, application security, threat intelligence, network, OT/ICS, GRC, business continuity and disaster recovery, third-party risk and security awareness. The complete library brings all 16 together, and the free SOC KPI dashboard is the easiest place to start.

How we build every kit

• Practitioner-built. Written from how security programs are actually run and reported, not from generic checklists.
• Framework-mapped. Aligned to NIST CSF 2.0 and NIST SP 800 guidance, CISA recommendations, CMMC 2.0 Level 2 and OWASP, with sources cited in every SOP.
• Yours to adapt. Everything is editable, with no macros. SLAs, targets and thresholds are starting points for your own policy.
• Leadership-ready. Every kit turns security work into the decisions and numbers leadership actually asks for.

Who we work for

CISOs and security managers building or maturing a program, SOC and GRC teams who need consistent reporting, and vCISOs, MSSPs and consultants who deliver programs for clients. Consultants who want to use the kits across several client organisations can ask about a consultant license.

Cyber careers

We're also building practical resources for people breaking into cybersecurity: a SOC analyst interview kit, resume and LinkedIn templates for security roles, certification study planners and a home-lab starter guide. Subscribe on the homepage to hear when each one launches.

Contact

Email hello@greymousestudio.com. Follow us on LinkedIn and YouTube for short, practical security program guides.

Program kits are working tools, not legal, audit or compliance advice. Confirm your obligations with qualified counsel and auditors. Framework and certification names (NIST, CISA, CMMC, OWASP, ISC2) are used for reference only; no endorsement is implied.