Proven Route to Build an ISO27001 Compatible ISMS.

If you're going to buy a Documentation Toolkit, it's got to be:

fit for purpose,
it's got to tie closely to the standard,
it's got to be a solid framework,
it's got to identify clearly and in detail where specific customisation is necessary, and
it's got to fit closely into detailed guidance on how to drive the overall project forward.

And that's what we've achieved with our Toolkit.

No 3 ISO27001 Comprehensive ISMS Toolkit

This is the most popular and most comprehensive ISO27001 ISMS toolkit.

When you use our highly practical and informative books and tools to help you tackle the project, you receive unique guidance and support for your organisation - plus, with this package, you save money!

Included in the toolkit are:

Documentation Toolkit: a CD-ROM with nearly 450 densely packed pages of fit-for-purpose policies and procedures;
IT Governance: a Manager's Guide to Data Security (Soft Cover) 4th Edition;
vsRisk™- the Definitive ISO/IEC27001:2005-Compliant Information Security Risk Assessment Tool;
Plus hard copies of all three of the information security standards.

You will also receive a unique drafting support service and 12 months of automatic updates.

Our CEO (Alan Calder), was CEO of one of the first two organisations in the world to achieve BS7799 certification (BS7799 was the forerunner to ISO27001) - in fact, they achieved it twice, once before BS7799 became a UKAS scheme, and once afterwards.

That second audit was also what is called an 'observed audit' - one where UKAS were observing the quality of work that the certification body did when assessing our BS7799 system.

"We did things that were considered revolutionary back then, including working out how to integrate our ISO27001 system with our ISO9001 management system. We weren't technologists; we just wanted to make information security a reality. We developed a documentation framework that was extremely pragmatic, focused on achieving maximum security with minimum procedure, minimum hassle and complete integration with the business model and business plan." Alan Calder.

Alan and Steve (Steve Watkins is our Director of Consultancy), wrote the book 'IT Governance: a Manager's Guide to Data Security and ISO27001/ISO27002' (now in it's 4th Edition), as a means of sharing their BS7799/ISO27001 project management experience with others.

Since then, IT Governance has worked with a number of organisations (in both the public and private sectors) to implement ISO27001 systems.

The fourth edition of the book is now available and an integral part of the toolkit. It has also been adopted as the Open University's text book.

When Alan finally decided to offer our complete documentation toolkit to the general market, he took a look at what else was available on the Internet - and was amazed at its lack of adeqate detail, lack of practicality, and lack of real customisability.

"I couldn't find anything that could really be deployed without first requiring so much work that there wasn't much point in buying it in the first place." Alan Calder.