Description

What is inside

• Gap-assessment workbook (XLSX): every clause 4–10 requirement and all 93 Annex A controls with scoring, evidence column and automatic readiness percentage.
• Risk assessment methodology (DOCX) and risk register (XLSX) with likelihood/impact matrix, 40 pre-filled common SMB risks and treatment tracking.
• Statement of Applicability (XLSX): 93 controls pre-populated with typical justifications you edit.
• 13 policy templates (DOCX): Information Security Policy, Access Control, Acceptable Use, Asset Management, Classification & Handling, Backup, Incident Management, Supplier Security, Secure Development, Cryptography, Remote Working, Business Continuity, Logging, Monitoring & Vulnerability Management.
• Internal audit checklist and report template, management review agenda and minutes template, ISMS scope statement and CAPA log.
• 90-day implementation roadmap with week-by-week tasks for a 10–100 person company.
• Mandatory documents map so you know exactly what an auditor will ask for.

Who it is for

IT managers, founders and consultants preparing an SMB for ISO 27001:2022 certification without paying ₹3–5 lakh for a consultancy to produce the same documents. Templates follow the 2022 version of the standard, including the 11 new controls.

Format

Editable Microsoft Word and Excel files (also open in Google Docs/LibreOffice).

Need help implementing?

Pair the kit with our ISO 27001 Readiness Assessment; kit buyers get the kit price deducted from the assessment fee.