Self-assessment · 15 questions
Are you audit-ready?
Score your organization across five domains: governance, access controls, data protection, incident response, and vendor risk. Get an instant readiness rating with clear next steps.
Free — no email required
Security, compliance & AI tools built for small business
Practical, ready-to-use templates and guides that help you understand your risk, manage compliance, govern AI adoption, and prepare for audits — without the enterprise overhead.
Security & compliance
Excel template · pre-built formulas
Risk register template
A structured spreadsheet for identifying, scoring, and tracking your organization's risks. Includes auto-calculated risk ratings (Critical / High / Medium / Low), a dashboard summary, and 45 editable risk rows.
Guide · 10 risk profiles
Top 10 security risks small businesses ignore
Plain-English breakdown of the ten security and compliance gaps that catch small businesses off guard, with real-world examples and specific action steps for each.
Questionnaire · 29 questions
Vendor risk questionnaire
A structured assessment for evaluating any third-party vendor's security posture. Covers security program, access controls, data protection, network security, and subcontractor risk. Includes a reviewer scoring section.
Checklist · multi-framework
Regulatory compliance checklist
A working checklist for tracking obligations across the frameworks that most often apply to growing and regulated organizations, so nothing quietly falls off the list between reviews.
AI & emerging technology
NewChecklist · 6 categories · 25 items
AI readiness checklist for small businesses
A self-assessment covering leadership, data practices, policy, security, culture, and compliance. Know exactly where your gaps are before rolling out AI tools across your organization.
Reference guide · 6 risk profiles
AI risk radar
Six AI risks every business should understand — hallucination, data leakage, shadow AI, bias, vendor lock-in, and regulatory uncertainty — each mapped to plain-English mitigation steps.
Evaluation guide · 6 sections · 25 questions
AI vendor evaluation guide
What to ask before you buy any AI tool. Covers data privacy, accuracy, access controls, compliance fit, pricing lock-in, and vendor stability, with specific questions and red flags for each area.
Case studies · 3 done right · 3 done wrong
Real business examples: AI done right (and wrong)
Six real-world case studies showing what thoughtful AI adoption looks like versus costly missteps, across financial services, healthcare, retail, accounting, and tech. Each includes a key lesson.
Next step
Know your gaps before an auditor does.
These tools give you a starting point. IronRoot helps you turn the results into an action plan — practical, prioritized, and built for your team's actual capacity.