Control Register preview / NS-M05-004
Object-level check
Every function that uses client input to reach a record checks the caller's right to that record
Digital publication · 2026 edition
The Security Field Kit
From Prototype to Production
Plan and document a security review before a launch, pilot or client handoff. Select controls for your system, test the boundaries and give the release owner a written basis to ship or hold.
Security Field Kit
US$149One time · Taxes included
8 files · 3.1 MB ZIP
Test checkout · No real payment
Open purchase form- 183pages in the guide
- 16modules
- 244control records
- 264references
What you receive
Your download contains the original 2026 edition, published under PRAE’s former name. The guide, workbook, register and worked example are designed to be used together.
- 00
Start Here
Three-page PDFThe package map and a practical first review. Open this before you begin.
- 01
From Prototype to Production
183-page field guide · PDFSixteen modules with baseline controls, failure patterns, test cases, standards mappings, and 264 cited references.
- 02
Security Review Workbook
15-page PDF + editable DOCXTen reusable records, W01–W10, covering scope, boundaries, evidence, actions, and decisions. The PDF is for reading and printing; edit the Word file.
- 03
Control Register
XLSX + CSV · 244 control recordsThe Excel register includes dropdowns, filters, summaries, and sources. The CSV contains portable register data.
- 04
Harbor Desk
17-page worked example · PDFA complete fictional review connecting a failure, correction, limited retests, open issues, and a HOLD decision.
- 05
License
TXTPurchaser permissions, organizational use, completed client deliverables, and redistribution limits.
Sample pages and controls
Read two controls from the register, then open the workbook and worked example pages at full size.
Control Register preview / NS-M05-008
Verified tenant context
Client-supplied tenant IDs are selectors only; context binds to verified identity and current membership
In the fictional example, the original T02 failure stays in the record beside the T02R pass. Untested historical links, alternate paths, and production settings keep the control conclusions Inconclusive and the proposed production release on HOLD.
Buy the Field Kit · US$149One-time purchase, taxes included.
Run a review
- Define the system, proposed activity, scope, and owner.
- Select relevant controls and record applicability.
- Perform authorized checks and record evidence and its limits.
- Assign unresolved work and make a scoped decision.
Work through the relevant modules at your own pace. Coverage includes trust boundaries and zero trust, identity and authorization, data protection, application/API security, software supply chains, infrastructure, AI systems, incident response, recovery, suppliers, and release decisions. The guidance is platform independent.
Who uses the kit
Founders & product owners
Define release conditions and unresolved responsibilities.
Developers & technical teams
Build a repeatable review process, tied to checks and evidence.
Agencies & studios
Produce useful internal records and completed client deliverables.
Technical implementation and checks require appropriate skill, access, and authorization. The kit is educational material and tools. It is not an assessment, certification, legal advice, compliance assurance, or security guarantee.
Before you buy
Is this a subscription or a service?
No. It is one digital purchase: the eight listed files in one ZIP. Individual advice, implementation work, support services, and future updates are not promised.
Can my organization or clients use it?
Your organization’s employees and contractors may use it while acting for that organization. Adapt the workbook and register for completed client records and reports, including client branding. The guide, worked example, and blank or lightly modified templates cannot be freely redistributed. Read the complete license.
How do I get and recover the files?
After confirmed payment, the returning purchase page verifies your browser and payment and opens the private download. An access email follows independently. Recovery links last 30 minutes and require your confirmation; the resulting browser session lasts 24 hours. Request a fresh link through Access my purchase. Keep a local backup; perpetual hosted access is not promised.
Can I get a refund?
Null Ventures offers no separate voluntary satisfaction guarantee. Link’s purchase terms and refund process apply, including applicable consumer cancellation rights. Immediate access does not remove those rights. Read the purchase policy before payment. Use Link support for payment requests and PRAE for file access help.