ClausePass27001 Toolkit 2.0 is available
See what is included in the current toolkit release.
View toolkitAn ISO 27001 toolkit for teams with a business to run.
130+ editable resources, practical guidance and worked examples to help you handle more of the implementation in-house.
Explore the ClausePass27001 toolkit
Know what comes next.
Use the guide to find only the templates needed for the decision in front of you.
Give every task an owner.
Set the scope, assign responsibility, and give the next 30 or 90 days a workable plan.
Record how you will treat each risk.
Keep the treatment decision, relevant controls and owner together.
Find gaps before the audit.
Review readiness, record findings, and keep open work visible until it is fixed.
Take a closer look.
Continue into a 26-page sample of the documents and trackers inside ClausePass27001.
Explore what’s insideKnow what comes next.
Use the guide to find only the templates needed for the decision in front of you.
Give every task an owner.
Set the scope, assign responsibility, and give the next 30 or 90 days a workable plan.
Record how you will treat each risk.
Keep the treatment decision, relevant controls and owner together.
Find gaps before the audit.
Review readiness, record findings, and keep open work visible until it is fixed.
Take a closer look.
Continue into a 26-page sample of the documents and trackers inside ClausePass27001.
Explore what’s insideDoing it yourself should not mean figuring out everything yourself.
Most teams fit ISO 27001 around their usual work. Research, blank files and unclear ownership can eat up that limited time.
Blank-page work
Policies, registers, and plans still need a first draft before your team can review or use them.
Scattered answers
Articles and sample documents leave your team to work out what comes next and who needs to approve it.
No spare compliance team
For founders and small teams, ISO 27001 competes with product work, customers, hiring, and daily operations.
Routine help gets expensive
Outside expertise matters, but paying consulting rates for every document can drain the implementation budget.
Start with the work already prepared.
When the next decision comes up, open the template or guide written for it and adapt the prepared material with your own scope, control choices, and approvals.
Implementation planning
Set out why the ISMS is needed, what it covers and who owns it. Then choose what the team can finish in the next 30 or 90 days.
Scope and governance
Set the boundary around services, people, locations, technology, and suppliers, then record who can approve it.
Policies, standards and procedures
Adapt only the policies, standards, and procedures that people can follow and your team can maintain.
Risk and Statement of Applicability
Record each risk, treatment decision, relevant control, owner, and approval without hiding unanswered questions.
ISMS registers, plans and logs
Use 23 workbooks to run and record scope, risks, suppliers, evidence, audits, objectives, and other ongoing work.
Evidence, internal audit and improvement
Define what you need to prove, test normal and difficult cases, record gaps, and track fixes through retesting.
Certification preparation
Check whether the ISMS is ready, plan the audit, and keep open findings visible until they are resolved and tested.
Sector guidance
Adjust the work for your service, technology, location, and contracts, and check current primary sources wherever requirements differ.
Worked examples
Fictional examples show how the work changes after disagreement, missing evidence, failed tests, fixes, and retesting.
License and release
Review the license, support, and update terms before turning the templates into your business records.
Keep the work in-house without starting at zero.
Start with the access reviews, backups, supplier checks and incident processes your team already has. ClausePass helps you organize that work into a clear scope, named owners, working records and evidence the team can explain.
Use the templates as working first drafts, adding the facts, approvals, and evidence from your own business.
Compare the cost before you buy.
All figures are in US dollars. Service costs, taxes, exchange rates and license terms can vary.
High Table
The ISO 27001 Document Pack lists one license for one business.
$197
Listed in USD
2× THE PRICE
GRC Solutions
The first year costs £395 excluding VAT, followed by a £95 annual renewal excluding VAT.
$530
£395
5× THE PRICE
CertiKit
The perpetual license costs £595 excluding VAT.
$799
£595
8× THE PRICE
Advisera
The toolkit is sold once and includes guided personalization, tutorials, and expert support.
$897
Listed in USD
9× THE PRICE