Skip to content
ITSailor Handbook · reviewed 18 July 2026

Practical resources for stronger IT operations.

Diagnostics you can run now, packs you can edit, field guides you can read and workshops you can book. Every entry names what it verifies and what it cannot see.

What is on the shelfone mark, one resource
Paid of total4/30

Read from the ITSailor codebase at the commit this page was built from, and pinned by a test so it cannot drift.

Open the pack manifest and checksums

Full resource library

Find the right depth.

Diagnostics frame the problem. Packs give you editable working files. Field guides explain the decisions. Workshops add live review against your own environment.

30 of 30 resources

Book the room

2

A live session against your own environment, scoped in writing before anything is paid for.

Architecture & Security Design Workshop

A two-hour live review that maps the current state, identifies material risks and defines a target architecture with a written follow-up.

€499 · scope first · 2-hour live session · written deliverable in 5 days

Review the workshop

What is verified

2-hour live session · written follow-up target: 5 business days

  • Current-state review
  • Target-state decisions
  • Written deliverable

Limits. Scope and evidence inputs are agreed before payment.

Microsoft 365 Tenant Hardening Workshop

A focused Microsoft 365 hardening brief covering identity, access, endpoint and evidence priorities for the tenant.

€149 · scope first · 90 minutes live · checklist · policy templates

Review the workshop

What is verified

90-minute format · scope reviewed before purchase

  • Identity priorities
  • Policy review
  • Remediation sequence

Limits. Recording and fulfilment evidence are under release verification. Confirm the delivery format before purchase.

Read the long form

2

Field guides that carry their sources, delivered as a PDF the moment payment clears.

DORA & NIS2: The Strategic IT Roadmap

The C-level roadmap for mapping ICT risk, scope, third-party concentration, incident reporting and resilience testing to a 90/180/365-day operating plan, in the language each reviewer expects.

€99 · instant PDF delivery · 29-page field guide

Buy the field guide

What is verified

29 pages · 12 chapters · named primary sources

  • 12 chapters
  • Source references
  • Operational decision guidance

Limits. Framework mapping is operational guidance, not certification or legal advice.

Microsoft 365 Tenant Hardening for DORA and NIS2 Operations

A practitioner field guide for regulated EU operators running Microsoft 365. Maps DORA Article 9, NIS2 Article 21, NIST CSF 2.0 and the source-linked ITS-M365 control set to tenant controls, evidence and operating routines.

€99 · instant PDF delivery · 69-page field guide

Buy the field guide

What is verified

69 pages · 10 chapters · named primary sources

  • 10 chapters
  • Source references
  • Operational decision guidance

Limits. Framework mapping is operational guidance, not certification or legal advice.

Download and edit

16

Working files you open in your own tools. No account, no email gate, checksums published.

Azure Landing Zone Readiness Pack

Discovery, architecture, security baseline, policy and operating-review templates for Azure platform planning.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

6 planning templates · policy intent · operating review

  • Discovery questionnaire
  • Architecture decision template
  • Security baseline and policy initiative
  • Break-glass and monthly review procedures

Limits. This pack excludes deployable Terraform. Validate controls against the tenant, subscriptions and regulatory scope.

Azure Virtual Desktop Readiness Pack

Assess AVD requirements, architecture, FSLogix recovery, security, cost and regional outage readiness.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

6 planning templates · recovery · cost and outage review

  • Discovery questionnaire
  • Architecture decision and security baseline
  • FSLogix recovery runbook
  • Cost review and regional outage procedures

Limits. Capacity, image, identity, network and application compatibility decisions require environment testing.

Backup & Restore Drill Pack

Plan, run and evidence recovery drills without inventing the process during an incident.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

6 working templates · drill evidence · recovery validation

  • Backup and DR baseline checklist
  • Recovery drill and tabletop runbooks
  • RPO/RTO validation procedure
  • DR drill report and crisis communications

Limits. Adapt recovery objectives, escalation paths and communication duties to the environment before use.

Claude Code Starter Kit for IT Ops

Turn Claude Code into a working member of your IT operations team: 7 specialist agents, 5 guided skills, a project-memory template and the safety rails for regulated EU environments.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

7 agents · 5 guided skills · safety contract

  • 7 IT-ops agents (M365 auditor, offboarding verifier, KQL analyst...)
  • 5 guided skills (/m365-baseline-check, /offboard-user, /licence-audit...)
  • CLAUDE.md template + safety contract + permission settings
  • 7 copy-paste workflows for your first two weeks

Limits. Review generated commands before execution. The kit defaults to read-only work.

Cloud Cost Audit Workbook

The six-tab Excel model ITSailor uses to surface cloud + SaaS waste and rank the savings backlog. Real formulas, not a static sheet.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

6-tab Excel model · formulas · prioritised savings backlog

  • Spend Baseline + Waste Flags
  • Commitment Break-Even Calculator
  • Savings Backlog Tracker

Limits. Outputs depend on the accuracy and completeness of the billing exports supplied.

Cloud Licence & Renewal Pack

Track renewals, audit licence use, assess new vendors and prepare evidence before commitment windows close.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

6 working templates · renewal calendar · audit and reclaim procedures

  • Renewal calendar
  • Licensing audit workbook
  • Vendor intake and leaver reclaim runbooks
  • Monthly report and renewal notice templates

Limits. Commercial terms, tax treatment, vendor rules and usage data must be verified for each agreement.

Cloud Migration Cutover Pack

Structure discovery, pilot waves, cutover, rollback and hypercare for cloud and Microsoft 365 migrations.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

7 working templates · cutover gates · rollback procedure

  • Discovery questionnaire
  • Wave plan and cutover checklist
  • Pilot, rollback and hypercare runbooks
  • Day-one communication template

Limits. Tooling, coexistence, data protection and rollback criteria require workload-specific validation.

DORA/NIS2 Decision Templates

Structured decision matrices for mapping regulatory gaps.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

Gap analysis · compliance mapping · incident taxonomy

  • Gap Analysis Sheet
  • Compliance Mapping
  • Incident Taxonomy

Limits. Templates support evidence collection. They do not establish legal compliance.

ITSailor Agent Library

Twelve model-neutral system prompts for IT operations and security workflows.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

12 model-neutral system prompts · configuration guide

  • 12 System Prompts
  • Claude/GPT Config
  • Usage Guide

Limits. Prompts require environment-specific review, access controls and human approval.

Microsoft 365 Evidence Snapshot

Read-only PowerShell and KQL examples for Secure Score, inactive licensed users and failed sign-in bursts.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

2 read-only Graph scripts · 1 KQL query · permissions guide

  • Secure Score snapshot script
  • Inactive licensed-user audit script
  • Failed sign-in burst KQL
  • Permissions and data-handling guide

Limits. Exports can contain personal and security data. Confirm authority, Graph permissions, storage and retention before use.

Microsoft 365 Security Review Workpapers

Versioned workpapers for reviewing Microsoft 365 controls, evidence, permissions and remediation priorities.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

38 source-linked checks · permission audit · gap analysis

  • 38-check Security Review
  • Permission Audit
  • Gap Analysis

Limits. Validate every control against current Microsoft guidance, tenant licensing, applicability and risk.

Microsoft Defender Incident Response Pack

Operational templates for triage, device isolation, email purge, identity compromise and detection review.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

7 working templates · 4 response procedures · review records

  • Defender deployment baseline
  • Incident triage and device isolation
  • Email purge and identity compromise
  • Detection tuning and monthly review records

Limits. Response authority, licensing and portal capabilities must be confirmed before an incident.

Microsoft Sentinel Detection Starter

Three KQL detections plus the catalogue, tuning, hunting and review records needed to operate them.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

3 KQL samples · 2 runbooks · monthly operating review

  • 3 starter KQL detections
  • Detection catalogue template
  • False-positive tuning and threat-hunt runbooks
  • Monthly SIEM review template

Limits. Validate schemas, thresholds, data coverage and response ownership before enabling alerts.

Resilience Repo Starter Pack

AWS Terraform scaffolding, a BCDR SOP and an infrastructure decision matrix.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

AWS Terraform baseline · BCDR SOP · decision matrix

  • AWS Terraform Baseline
  • BCDR SOP Template
  • Decision Matrix

Limits. The Terraform is a starting point, not a production certification. Review every resource before deployment.

Sovereign Exit Kit Starter

Record ownership, architecture, handover evidence and supplier-exit questions before a dependency becomes lock-in.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

4 neutral templates · ownership map · handover and supplier-exit checks

  • Neutral Exit Kit template
  • System context and dependency map
  • Handover evidence checklist
  • Supplier exit question set

Limits. Contract, data-protection and regulatory exit duties require legal and environment-specific review.

Workflow Engineering Starter Flow Pack

Two sanitised n8n workflow exports, a broken-flow triage runbook and the operating notes needed to adapt them safely.

Free · direct ZIP · ZIP resource pack

Open the pack

What is verified

2 sanitised n8n exports · triage runbook · operating notes

  • CSP order workflow structure
  • Pax8 catalogue sync structure
  • Broken-flow triage runbook
  • Flow naming and adaptation notes

Limits. Credentials and implementation code are removed. Rebuild authentication, validation and error handling for your environment.

Run a diagnostic

9

Browser diagnostics that frame a problem in a few minutes and tell you what they cannot see.

AI Readiness Scan

Get an AI deployment verdict, risk register, and 90-day plan from what you declare.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

18 declared controls · risk register · unknowns stay unknown

  • 18 controls
  • 6 dimensions
  • self-assessment, not an audit

Limits. Diagnostic output is directional and should be verified against the source environment.

Automation ROI Scenario Builder

Model one workflow from your own operating numbers and see the range it produces.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

Your own baseline · three scenarios · 7 scored questions of 10

  • Your six operating inputs
  • low, centre, and high case
  • 7 scored questions of 10

Limits. Diagnostic output is directional and should be verified against the source environment.

Azure Cost Review

Read your own Azure cost export without it leaving your browser.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

FREE · NOTHING UPLOADED

  • MCA, EA and FOCUS schemas
  • file parsed in the browser
  • unread stays unread

Limits. Diagnostic output is directional and should be verified against the source environment.

DevEx Maturity Scan

Inspect one GitHub repository across five evidence families.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

5 evidence families · unreadable controls stay unknown · token not stored

  • 5 evidence families
  • unreadable controls stay unknown
  • token not stored

Limits. Diagnostic output is directional and should be verified against the source environment.

Email Deliverability Scanner

Ensure your emails hit the inbox, not the spam folder.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

Live DNS checks · 29 DKIM selectors

  • 8 record types checked
  • 29 DKIM selectors
  • inbox-readiness score in seconds

Limits. Diagnostic output is directional and should be verified against the source environment.

Microsoft 365 Licence Overlap Check

Check whether the add-on you are about to buy is already in the plan you hold.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

15 add-ons · every verdict sourced to Microsoft · unsettled pairs stay unsettled

  • 15 add-ons
  • every verdict sourced to Microsoft
  • unsettled pairs stay unsettled

Limits. Diagnostic output is directional and should be verified against the source environment.

Microsoft 365 Security Scorecard

Review your Microsoft 365 security posture across 38 risk-weighted controls.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

38 checks · 6 categories · source-linked assessment

  • 38 controls
  • 6 categories
  • directional security review

Limits. Diagnostic output is directional and should be verified against the source environment.

Offboarding Risk Profiler

Identify access leaks and data risks for departing users.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

Risk profile · gap matrix · remediation timeline

  • Risk radar
  • compliance gap matrix
  • cost-impact estimate (IBM CODB 2025)

Limits. Diagnostic output is directional and should be verified against the source environment.

SaaS Auditor - License, Spend & Shadow IT

Find every SaaS you run - and pay for - across users, spend, and SSO.

Free · no account · Interactive diagnostic

Run the diagnostic

What is verified

Three scan paths · browser-local CSV processing

  • Users
  • Spend
  • SSO

Limits. Diagnostic output is directional and should be verified against the source environment.

Inspect real output

1

The formats our products actually produce, rendered from clearly labelled demo data.

Live Product Output Gallery

Inspect real output formats from Offboarding Evidence and SaaS Auditor, rendered from clearly labelled fixed demo data.

Free · no account · Live sample gallery

Inspect the samples

What is verified

Fixed demo data · production rendering paths · nothing persisted

  • Offboarding Evidence leaver evidence pack
  • AI Act inventory register
  • SaaS management CFO report

Limits. Samples show output structure and depth, not findings from a real tenant.

Evidence policy

Claims should survive a reviewer.

A framework name is not a badge. Handbook material names the source, separates guidance from certification and tells you when environment-specific verification is still required.

Published by

ITSailor is the trading brand. Legal and VAT records use Michal Jatczak, Malta VAT MT32760411.

The number is registered in Malta and is checkable in the EU VIES register, which the credential band links directly.

Check the publisher on the registers
Before you use the library

Clear answers, before the download.

Are the free resources actually free?
Yes. Diagnostics and live samples need no account. Available packs download directly with no email gate, and an optional email copy does not add you to the Ops Log newsletter.
Do the templates prove DORA or NIS2 compliance?
No. They help structure controls, evidence and decisions. Compliance depends on scope, implementation, evidence and ongoing operation. Every entry states its own limitation.
How are framework versions handled?
The library names its review date and links primary sources. Version-sensitive workpapers tell you to verify controls against the current source edition before recording coverage.
What does a paid entry commit you to?
Field guides deliver a PDF as soon as payment clears. Workshops are scoped in writing before payment, and the written follow-up is the deliverable. Refund terms for each are set out in the refund policy. Read the refund policy

Bring the environment and the decision.

A scoped engagement starts with the current state, the evidence you already have and the outcome that must remain usable after handover.