ISO 27001 ISMS Toolkits

ISO 27000 Standards | Books | Training | Consultancy | Our Complete ISO 27001 Catalogue

This page contains information about our ISMS Documentation Toolkits and its variants, the benefits of using our toolkits and free resources.

What is on this page:

Which Toolkit is Right For You?

Here we will discuss which toolkit is right for you and your organisation.

The No 3 Comprehensive ISMS Toolkit contains everything you need to implement a successful ISO 27001 project. It also includes the risk assessment tool vsRisk. Note: a risk assessment tool is central and a prerequisite to any ISO 27001 project. More information about Risk Assessment tools can be found here.

The No 4 ISMS Toolkit contains the documentationa toolkit and IT Governance: a Manager's Guide to Data Security and ISO 27001 / ISO 27002, 4th edition (ITG4).

The No 5 ISMS Toolkit contains, in addition to the contents of the No 4 Toolkit, copies of both standards ISO 27001 and ISO 27002.

The No 1 ISMS Toolkit contains, in addition to the contents of the No 5 Toolkit, ISO 27005, the information security risk assessment standard.

The No 2 ISMS Toolkit is the same as the No 3 Toolkit, except that it doesn't contain the three information security standards. Ideal if you already have the standards but nothing else!

The below matrix shows the components of each of the toolkits:

Toolkit	Doc. Toolkit	ISO 27001	ISO 27002	ISO 27005	ITG4	Imp. ISO27001 in Wndws Enviro.	vsRisk	LiveOnline
No 1	√	√	√	√	√
No 2	√				√		√
No 3	√	√	√	√	√	√	√	√
No 4	√				√
No 5	√	√	√		√
Standalone	√

Customer Reviews

Here is a sample of some of the customer reviews for our documentation toolkits:

"Essential...for information security professionals in these days of increased focus on compliance and standards." Milo Doyle, Head of Information Security, EBS Building Society, Ireland.

"For complete coverage of the standard, this...is unparalleled." Dr Jon G Hall, Open University.

"...a critical source when preparing and managing the ISMS." Bill Pepper, Director of Security Risk Management CSC NR Royal Pavilion.

"...a comprehensive guide as to actions that should be taken." Nigel Turnbull, Chairman, Lasmo Plc, author of the Turnbull Report.

Chairman, Lasmo Plc, author of the Turnbull Report. Tim Moreton, President, Moreton & Co., airlinetechnology.net.

Free Resources

ISMS Documentation Toolkits are a fantastic resource for an ISO 27001 project. Below you can receive a free trial version, our White Paper on toolkits and a presentation on how to develop an ISMS:

Presentation – The Steps Required To Develop An ISMS
White Paper – Policies & Procedures: The Key To ISO 27001 Certification
Free Trial Version – We will email download details to you as soon as you've registered (you only need to submit once):

Why Choose a Toolkit?

The hardest part of achieving ISO 27001 certification is the documentation of the Information Security Management System (ISMS). The documentation that is necessary to create a conforming system can, particularly in more complex businesses, be up to thousand pages.

Then there is the ‘how to do it issue’. There is a lot of learning before you get the documentation formulae and process working effectively.

The resource, time and management implications of making all this happen are immense. But that’s where toolkits come in. Toolkits are precisely tailored to the requirements of ISO 27001 and contain pre-written documents, which can be tailored to your organisation. Our unique document support service offers after sales support to answer your queries, and each toolkit includes 12 months of free updates.

Benefits of a Toolkit

A toolkit can accelerate your ISO 27001 project immensely. The key benefits of a toolkit are:

A toolkit is cheaper than one days’ consultancy
Provides clear guidance on the role of risk assessment
Template documents are easy to edit and customise
Template documents save you time on research
Template documents save you time on procedure writing
Makes you your own expert
An after sales support service
12 months of automatic updates

Importantly, you do not want hundreds and hundreds of policies, after all ISO 27001 only requires 7 policies. By purchasing a toolkit, you receive a set of policies and procedures that really enable you to implement ISO 27001.

The Standalone Documentation Toolkit

There are 6 versions of the ISO 27001 Toolkit, all of which include the Standalone ISO 27001 ISMS 27001 Documentation Toolkit (CD-Rom). The Standalone Toolkit includes:

A model Information Security Policy
A model Statement of Applicability
Pre-written Information Security Manual
vsRisk and RA2 Risk Assessment Tool Integration Templates (but not vsRisk or RA2 themselves)
A Business Continuity Plan
Service Level Agreement Template
400 pages of fit-for-purpose information
110 pre-written policies, procedures, templates and guidance
Implementation manager
Enterprise security assessment tool
Gap analysis/7799 Audit tool
'What is BS7799/ISO17799?' - project staff training slides
PDCA and documentation pyramid presentation

The Standalone Toolkit is available as a CD-Rom and a Download, and is ideal for those who already possess a copy of IT Governance: a Manager's Guide to Data Security and ISO27001/ISO27002 (the textbook for the Open University's postgraduate information security course).

ISO27001 Toolkits