ISO 27001 ISMS Toolkits

ISO 27000 Standards | Books | Training | Our Complete ISO 27001 Catalogue

This page contains information about our ISMS Documentation Toolkits and its variants, the benefits of using our toolkits and free resources.

Free Resources

ISMS Documentation Toolkits are a fantastic resource for an ISO 27001 project. Below you can receive a free trial version, our White Paper on toolkits and a presentation on how to develop an ISMS:

• Presentation – The Steps Required To Develop An ISMS
• White Paper – Policies & Procedures: The Key To ISO 27001 Certification

Why Choose a Toolkit?

The hardest part of achieving ISO 27001 certification is the documentation of the Information Security Management System (ISMS). The documentation that is necessary to create a conforming system can, particularly in more complex businesses, be up to thousand pages.

Then there is the ‘how to do it issue’. There is a lot of learning before you get the documentation formulae and process working effectively.

The resource, time and management implications of making all this happen are immense. But that’s where toolkits come in. Toolkits are precisely tailored to the requirements of ISO 27001 and contain pre-written documents, which can be tailored to your organisation. Our unique document support service offers after sales support to answer your queries, and each toolkit includes 12 months of free updates.

Benefits of a Toolkit

A toolkit can accelerate your ISO 27001 project immensely. The key benefits of a toolkit are:

• A toolkit is cheaper than one days’ consultancy
• Provides clear guidance on the role of risk assessment
• Template documents are easy to edit and customise
• Template documents save you time on research
• Template documents save you time on procedure writing
• Makes you your own expert
• An after sales support service
• 12 months of automatic updates

Importantly, you do not want hundreds and hundreds of policies, after all ISO 27001 only requires 7 policies. By purchasing a toolkit, you receive a set of policies and procedures that really enable you to implement ISO 27001.

The Standalone Documentation Toolkit

There are 6 versions of the ISO 27001 Toolkit, all of which include the Standalone ISO 27001 ISMS 27001 Documentation Toolkit (CD-Rom). The Standalone Toolkit includes:

• A model Information Security Policy
• A model Statement of Applicability
• Pre-written Information Security Manual
• vsRisk and RA2 Risk Assessment Tool Integration Templates (but not vsRisk or RA2 themselves)
• A Business Continuity Plan
• Service Level Agreement Template
• 400 pages of fit-for-purpose information
• 110 pre-written policies, procedures, templates and guidance
• Implementation manager
• Enterprise security assessment tool
• Gap analysis/7799 Audit tool
• 'What is BS7799/ISO17799?' - project staff training slides
• PDCA and documentation pyramid presentation

The Standalone Toolkit is available as a CD-Rom and a Download, and is ideal for those who already possess a copy of IT Governance: a Manager's Guide to Data Security and ISO27001/ISO27002 (the textbook for the Open University's postgraduate information security course).

Which Toolkit is Right For You?

Here we will discuss which toolkit is right for you and your organisation.

The No 3 Comprehensive ISMS Toolkit contains everything you need to implement a successful ISO 27001 project. It also includes the risk assessment tool vsRisk. Note: a risk assessment tool is central and a prerequisite to any ISO 27001 project. More information about Risk Assessment tools can be found here.

The No 4 ISMS Toolkit contains, in addition to the Documentation Toolkit, IT Governance: a Manager's Guide to Data Security and ISO 27001 / ISO 27002, 4th edition (ITG4) - A comprehensive online glossary.

The No 5 ISMS Toolkit contains, in addition to the contents of the No 4 Toolkit, copies of both standards ISO 27001 and ISO 27002.

The No 1 ISMS Toolkit contains, in addition to the contents of the No 5 Toolkit, BS7799-3, the risk assessment standard.

The No 2 ISMS Toolkit is the same as the No 3 Toolkit, except that it doesn't contain the three information security standards.

The below matrix shows the components of each of the toolkits: