Enterprise Information Security Checklist?

Question

Information Security

Good afternoon, I'm wondering if anyone found and compiled a checklist (cheat sheet) for enterprise information security?
For example, when did you raise a department from scratch?, because information of 1000 pages is difficult to remember.
for example: We wrote (copied or localized) the Company's policy, sort of took into account all aspects, wrote a link to some regulatory documents, wrote the "Code review" section, and created an internal regulatory document "Code review" and when the product is released to the Prodaction environment, everything re-read the normative document "Code review"?, if there is some kind of checklist (or diagram), by which you can quickly remember what needs to be done?
ps: I'm sorry, but I tried to express my thought as clearly as possible.

Answer 1

Draw up a security policy with a threat model in relation to the specifics of your organization and make your checklist according to it.

Answer 2

Information can be found in various Federal Laws. For example, information security requirements are being developed for financial systems - insurance, banks. The requirements can be found there. But you still need to develop it yourself for your business.