Skip to content
ITSailor HandbookReviewed 18 July 2026

Practical resources for stronger IT operations.

Free diagnostics, editable packs, live samples and field guides for Microsoft 365, security, resilience, cloud cost and AI operations. Every resource shows its contents, evidence and limits.

Browse all resourcesHow resources are verified
29
reviewed resources
25
free to use
17
editable packs
Evidence-led operating libraryMicrosoft 365 · DORA & NIS2 · FinOps · AI operations
Named publisher

Michal Jatczak

Explicit versions

Where versions affect the work

Visible limitations

Before you open or download

Primary sources

Linked directly wherever possible

Start with the operating problem

What are you trying to improve?

Choose an operating problem to narrow the library immediately. Each path combines diagnostics, working files and deeper guidance.

Full resource library

Find the right depth.

Diagnostics help you frame the problem. Packs give you editable working files. Field guides explain the decisions. Workshops add live review and a scoped outcome.

29 of 29 resources

Resource pack
Free · direct ZIP

Azure Landing Zone Readiness Pack

Discovery, architecture, security baseline, policy and operating-review templates for Azure platform planning.

What is verified

6 planning templates · policy intent · operating review

  • Discovery questionnaire
  • Architecture decision template
  • Security baseline and policy initiative
  • Break-glass and monthly review procedures

Scope note

This pack excludes deployable Terraform. Validate controls against the tenant, subscriptions and regulatory scope.

Open the pack
Resource pack
Free · direct ZIP

Azure Virtual Desktop Readiness Pack

Assess AVD requirements, architecture, FSLogix recovery, security, cost and regional outage readiness.

What is verified

6 planning templates · recovery · cost and outage review

  • Discovery questionnaire
  • Architecture decision and security baseline
  • FSLogix recovery runbook
  • Cost review and regional outage procedures

Scope note

Capacity, image, identity, network and application compatibility decisions require environment testing.

Open the pack
Resource pack
Free · direct ZIP

Backup & Restore Drill Pack

Plan, run and evidence recovery drills without inventing the process during an incident.

What is verified

6 working templates · drill evidence · recovery validation

  • Backup and DR baseline checklist
  • Recovery drill and tabletop runbooks
  • RPO/RTO validation procedure
  • DR drill report and crisis communications

Scope note

Adapt recovery objectives, escalation paths and communication duties to the environment before use.

Open the pack
Resource pack
Free · direct ZIP

Claude Code Starter Kit for IT Ops

Turn Claude Code into a working member of your IT operations team: 7 specialist agents, 5 guided skills, a project-memory template and the safety rails for regulated EU environments.

What is verified

7 agents · 5 guided skills · safety contract

  • 7 IT-ops agents (M365 auditor, offboarding verifier, KQL analyst...)
  • 5 guided skills (/m365-baseline-check, /offboard-user, /licence-audit...)
  • CLAUDE.md template + safety contract + permission settings
  • 7 copy-paste workflows for your first two weeks

Scope note

Review generated commands before execution. The kit defaults to read-only work.

Open the pack
Resource pack
Free · direct ZIP

Cloud Cost Audit Workbook

The six-tab Excel model ITSailor uses to surface cloud + SaaS waste and rank the savings backlog. Real formulas, not a static sheet.

What is verified

6-tab Excel model · formulas · prioritised savings backlog

  • Spend Baseline + Waste Flags
  • Commitment Break-Even Calculator
  • Savings Backlog Tracker

Scope note

Outputs depend on the accuracy and completeness of the billing exports supplied.

Open the pack
Resource pack
Free · direct ZIP

Cloud Licence & Renewal Pack

Track renewals, audit licence use, assess new vendors and prepare evidence before commitment windows close.

What is verified

6 working templates · renewal calendar · audit and reclaim procedures

  • Renewal calendar
  • Licensing audit workbook
  • Vendor intake and leaver reclaim runbooks
  • Monthly report and renewal notice templates

Scope note

Commercial terms, tax treatment, vendor rules and usage data must be verified for each agreement.

Open the pack
Resource pack
Free · direct ZIP

Cloud Migration Cutover Pack

Structure discovery, pilot waves, cutover, rollback and hypercare for cloud and Microsoft 365 migrations.

What is verified

7 working templates · cutover gates · rollback procedure

  • Discovery questionnaire
  • Wave plan and cutover checklist
  • Pilot, rollback and hypercare runbooks
  • Day-one communication template

Scope note

Tooling, coexistence, data protection and rollback criteria require workload-specific validation.

Open the pack
Resource pack
Free · direct ZIP

DORA/NIS2 Decision Templates

Structured decision matrices for mapping regulatory gaps.

What is verified

Gap analysis · compliance mapping · incident taxonomy

  • Gap Analysis Sheet
  • Compliance Mapping
  • Incident Taxonomy

Scope note

Templates support evidence collection. They do not establish legal compliance.

Open the pack
Resource pack
Free · direct ZIP

GCP Landing Zone Readiness Pack

Discovery, architecture, organisation policy and operating-review templates for a governed Google Cloud foundation.

What is verified

6 planning templates · policy set · operating review

  • Discovery questionnaire
  • Architecture decision template
  • Security baseline and organisation policy set
  • Break-glass and monthly review procedures

Scope note

This pack excludes deployable Terraform. Validate organisation policies and IAM decisions before rollout.

Open the pack
Resource pack
Free · direct ZIP

ITSailor Agent Library

Twelve model-neutral system prompts for IT operations and security workflows.

What is verified

12 model-neutral system prompts · configuration guide

  • 12 System Prompts
  • Claude/GPT Config
  • Usage Guide

Scope note

Prompts require environment-specific review, access controls and human approval.

Open the pack
Resource pack
Free · direct ZIP

Microsoft 365 Evidence Snapshot

Read-only PowerShell and KQL examples for Secure Score, inactive licensed users and failed sign-in bursts.

What is verified

2 read-only Graph scripts · 1 KQL query · permissions guide

  • Secure Score snapshot script
  • Inactive licensed-user audit script
  • Failed sign-in burst KQL
  • Permissions and data-handling guide

Scope note

Exports can contain personal and security data. Confirm authority, Graph permissions, storage and retention before use.

Open the pack
Resource pack
Free · direct ZIP

Microsoft 365 Security Review Workpapers

Versioned workpapers for reviewing Microsoft 365 controls, evidence, permissions and remediation priorities.

What is verified

38 source-linked checks · permission audit · gap analysis

  • 38-check Security Review
  • Permission Audit
  • Gap Analysis

Scope note

Validate every control against current Microsoft guidance, tenant licensing, applicability and risk.

Open the pack
Resource pack
Free · direct ZIP

Microsoft Defender Incident Response Pack

Operational templates for triage, device isolation, email purge, identity compromise and detection review.

What is verified

7 working templates · 4 response procedures · review records

  • Defender deployment baseline
  • Incident triage and device isolation
  • Email purge and identity compromise
  • Detection tuning and monthly review records

Scope note

Response authority, licensing and portal capabilities must be confirmed before an incident.

Open the pack
Resource pack
Free · direct ZIP

Microsoft Sentinel Detection Starter

Three KQL detections plus the catalogue, tuning, hunting and review records needed to operate them.

What is verified

3 KQL samples · 2 runbooks · monthly operating review

  • 3 starter KQL detections
  • Detection catalogue template
  • False-positive tuning and threat-hunt runbooks
  • Monthly SIEM review template

Scope note

Validate schemas, thresholds, data coverage and response ownership before enabling alerts.

Open the pack
Resource pack
Free · direct ZIP

Resilience Repo Starter Pack

AWS Terraform scaffolding, a BCDR SOP and an infrastructure decision matrix.

What is verified

AWS Terraform baseline · BCDR SOP · decision matrix

  • AWS Terraform Baseline
  • BCDR SOP Template
  • Decision Matrix

Scope note

The Terraform is a starting point, not a production certification. Review every resource before deployment.

Open the pack
Resource pack
Free · direct ZIP

Sovereign Exit Kit Starter

Record ownership, architecture, handover evidence and supplier-exit questions before a dependency becomes lock-in.

What is verified

4 neutral templates · ownership map · handover and supplier-exit checks

  • Neutral Exit Kit template
  • System context and dependency map
  • Handover evidence checklist
  • Supplier exit question set

Scope note

Contract, data-protection and regulatory exit duties require legal and environment-specific review.

Open the pack
Resource pack
Free · direct ZIP

Workflow Engineering Starter Flow Pack

Two sanitised n8n workflow exports, a broken-flow triage runbook and the operating notes needed to adapt them safely.

What is verified

2 sanitised n8n exports · triage runbook · operating notes

  • CSP order workflow structure
  • Pax8 catalogue sync structure
  • Broken-flow triage runbook
  • Flow naming and adaptation notes

Scope note

Credentials and implementation code are removed. Rebuild authentication, validation and error handling for your environment.

Open the pack
Diagnostic
Free · no account

AI Readiness Scan

Get an AI deployment verdict, risk register, and 90-day plan from what you declare.

What is verified

18 declared controls · risk register · unknowns stay unknown

  • 18 controls
  • 6 dimensions
  • self-assessment, not an audit

Scope note

Diagnostic output is directional and should be verified against the source environment.

Run the diagnostic
Diagnostic
Free · no account

Automation ROI Scenario Builder

Model one workflow from your own operating numbers and see the range it produces.

What is verified

Your own baseline · three scenarios · 7 scored questions of 10

  • Your six operating inputs
  • low, centre, and high case
  • 7 scored questions of 10

Scope note

Diagnostic output is directional and should be verified against the source environment.

Run the diagnostic
Diagnostic
Free · no account

DevEx Maturity Scan

Inspect one GitHub repository across five evidence families.

What is verified

5 evidence families · unreadable controls stay unknown · token not stored

  • 5 evidence families
  • unreadable controls stay unknown
  • token not stored

Scope note

Diagnostic output is directional and should be verified against the source environment.

Run the diagnostic
Diagnostic
Free · no account

Email Deliverability Scanner

Ensure your emails hit the inbox, not the spam folder.

What is verified

Live DNS checks · 29 DKIM selectors

  • FREE · LIVE DNS

Scope note

Diagnostic output is directional and should be verified against the source environment.

Run the diagnostic
Diagnostic
Free · no account

Microsoft 365 Security Scorecard

Review your Microsoft 365 security posture across 38 risk-weighted controls.

What is verified

38 checks · 6 categories · source-linked assessment

  • 38 controls
  • 6 categories
  • directional security review

Scope note

Diagnostic output is directional and should be verified against the source environment.

Run the diagnostic
Diagnostic
Free · no account

Offboarding Risk Profiler

Identify access leaks and data risks for departing users.

What is verified

Risk profile · gap matrix · remediation timeline

  • Risk radar
  • compliance gap matrix
  • cost-impact estimate (IBM CODB 2025)

Scope note

Diagnostic output is directional and should be verified against the source environment.

Run the diagnostic
Diagnostic
Free · no account

SaaS Auditor - License, Spend & Shadow IT

Find every SaaS you run - and pay for - across users, spend, and SSO.

What is verified

Three scan paths · browser-local CSV processing

  • Users
  • Spend
  • SSO

Scope note

Diagnostic output is directional and should be verified against the source environment.

Run the diagnostic
Live sample
Free · no account

Live Product Output Gallery

Inspect real output formats from Offboarding Evidence and SaaS Auditor, rendered from clearly labelled fixed demo data.

What is verified

Fixed demo data · production rendering paths · nothing persisted

  • Offboarding Evidence leaver evidence pack
  • AI Act inventory register
  • SaaS management CFO report

Scope note

Samples show output structure and depth, not findings from a real tenant.

Inspect the samples
Field guide
€99 · instant PDF delivery

DORA & NIS2: The Strategic IT Roadmap

The C-level roadmap for mapping ICT risk, scope, third-party concentration, incident reporting and resilience testing to a 90/180/365-day operating plan, in the language each reviewer expects.

What is verified

29 pages · 12 chapters · named primary sources

  • 12 chapters
  • Source references
  • Operational decision guidance

Scope note

Framework mapping is operational guidance, not certification or legal advice.

Buy the field guide
Field guide
€99 · instant PDF delivery

Microsoft 365 Tenant Hardening for DORA and NIS2 Operations

A practitioner field guide for regulated EU operators running Microsoft 365. Maps DORA Article 9, NIS2 Article 21, NIST CSF 2.0 and the source-linked ITS-M365 control set to tenant controls, evidence and operating routines.

What is verified

69 pages · 10 chapters · named primary sources

  • 10 chapters
  • Source references
  • Operational decision guidance

Scope note

Framework mapping is operational guidance, not certification or legal advice.

Buy the field guide
Workshop
€499 · scope first

Architecture & Security Design Workshop

A two-hour live review that maps the current state, identifies material risks and defines a target architecture with a written follow-up.

What is verified

2-hour live session · written follow-up target: 5 business days

  • Current-state review
  • Target-state decisions
  • Written deliverable

Scope note

Scope and evidence inputs are agreed before payment.

Review the workshop
Workshop
€149 · scope first

Microsoft 365 Tenant Hardening Workshop

A focused Microsoft 365 hardening brief covering identity, access, endpoint and evidence priorities for the tenant.

What is verified

90-minute format · scope reviewed before purchase

  • Identity priorities
  • Policy review
  • Remediation sequence

Scope note

Recording and fulfilment evidence are under release verification. Confirm the delivery format before purchase.

Review the workshop

Evidence policy

Claims should survive a reviewer.

A framework name is not a badge. Handbook material names the source, separates guidance from certification and tells you when environment-specific verification is still required.

Published by Michal Jatczak

ITSailor is the trading brand. Legal and VAT records use Michal Jatczak, Malta VAT MT32760411.

The number is registered in Malta and is checkable in the EU VIES register, which the credential band links directly.

Check the publisher on the registersZIP checksums
EU regulationDigital Operational Resilience ActRegulation (EU) 2022/2554, official textOpen primary sourceEU directiveNIS2 DirectiveDirective (EU) 2022/2555, official textOpen primary sourceSecurity frameworkNIST Cybersecurity Framework 2.0Public risk-management vocabulary and implementation guidanceOpen primary sourceVendor guidanceMicrosoft Secure ScoreMicrosoft documentation for posture measurementOpen primary source

Before you use the library

Clear answers, before the download.

Are the free resources actually free?
Yes. Diagnostics and live samples need no account. Available packs download directly with no email gate; an optional email copy does not add you to the Ops Log newsletter.
Do the templates prove DORA or NIS2 compliance?
No. They help structure controls, evidence and decisions. Compliance depends on scope, implementation, evidence and ongoing operation. Each catalogue card states a limitation.
How are framework versions handled?
The catalogue names its review date and links primary sources. Version-sensitive workpapers tell you to verify controls against the current source edition before recording coverage.
Who publishes the Handbook?
Michal Jatczak publishes the Handbook under the ITSailor trading brand. The resources are written for operators who need editable working material and clear ownership boundaries.

Need review, not another file?

Bring the environment and the decision.

A scoped engagement starts with the current state, the evidence you already have and the outcome that must remain usable after handover.

Start a scoped conversationStart with a free diagnostic