Product Security Cheat Sheets for Product Managers

Document how people and integrations get access and what evidence a team needs to review sensitive actions. The free English A4 PDF contains four fillable sheets with checks to work through and space to record decisions.

What’s inside

• Access matrix. Map roles to actions and resources, including when access is granted or changed.
• MFA and account recovery. Plan additional checks for sensitive actions and decide how users recover access if they lose an authentication factor.
• Access for integrations. Distinguish a service acting on its own behalf from an app acting with a user’s permission.
• Data and audit records. Define what an authorized reviewer needs to know about a sensitive action and what data to record.