# Responsible Cloud Starter Kit v1.0

Eight practical templates for small and growing organizations. Use them with the Responsible Cloud Methodology: Discover → Assess → Prioritize → Assign → Reduce → Prove.

## 1. Technology Inventory Worksheet
Purpose: record systems, purpose, ownership, data, criticality, dependencies, recovery, and review status.
Fields: System or service | Business purpose | Accountable owner | Administrator | Criticality | Data involved | Key dependency | Recovery approach | Last reviewed | Next action

## 2. SaaS & Vendor Inventory
Purpose: connect providers to contracts, data, access, cost, renewals, and dependencies.
Fields: Vendor or service | Business purpose | Owner | Data involved | Administrator | Annual cost | Renewal date | Contract | Security evidence | Critical dependency | Next review

## 3. AI Use-Case Intake Form
Purpose: review AI purpose, information, affected decisions, human oversight, and ownership before approval.
Fields: AI tool | Proposed use | Business owner | Users | Information entered | Decision affected | Human review | Terms reviewed | Approved limits | Decision and date

## 4. Risk Prioritization Worksheet
Purpose: sequence findings using likelihood, impact, importance, effort, cost, dependencies, and resources.
Fields: Finding | Likelihood | Impact | Business importance | Effort | Cost | Dependencies | Priority | Reason | Decision

## 5. Accountability / Ownership Worksheet
Purpose: name accountable and responsible parties, dates, status, and treatment choices.
Fields: Action | Accountable owner | Responsible party | Consulted | Informed | Due date | Status | Treatment | Accepted/deferred risk | Next review

## 6. Remediation Register
Purpose: track planned action, implementation, evidence, reassessment, and residual risk separately.
Fields: Finding | Original condition | Planned action | Owner | Due date | Action status | Evidence | Reassessment result | Residual risk | Next review | Notes

## 7. Risk Reduction Record
Purpose: document the initial and current assessment, completed actions, evidence references, remaining priorities, scope, and limitations.
Use the print-ready generator at https://responsiblecloud.com/proof.html.

## 8. Executive Risk Summary
Purpose: present priorities, decisions, owners, progress, evidence, residual risk, and next review to leadership.
Sections: Organization and scope | Top priorities | Progress since last review | Decisions | Funding/support | Next review

## Instructions
Start with the free Cyber Risk Check. Copy important findings into these worksheets. Verify information with the people responsible. Assign owners and dates. Keep task completion separate from reassessment. Retain only appropriate evidence and document remaining risk.

Responsible Cloud™ attribution. Version 1.0.

Disclaimer: These educational templates do not certify security, establish compliance, constitute an audit or legal opinion, guarantee insurance eligibility, or prove that a safeguard is effective. Adapt them to your organization, verify important information, and seek qualified advice where needed.