This is a template I use to mark through various compliance items as a base level audit, to then work through remediation steps to bring a company up to a standard level of security and compliance.