Thankfully, most of the included templates are structured in the same way (the exceptions are appendices and Excel files), and you’ll soon be able to discern the common elements. You’ll find it much easier to fill in the templates once you understand how they are structured. However, in case you’re in doubt on what you’re allowed to delete something, I suggest you review the standard itself to see what’s allowed. Since the standard doesn’t prescribe a set documentation format, you are free to change the documents quite a bit. To make things even more simple, the documents have a system in place that help you understand what information is missing. A substantial portion of the documents included in the Toolkit are already filled, you’ll just have to add the particulars of your company. If you’re a visual person, you’ll be glad to know the Toolkit also provides a diagram of the ISO 27001:2013 implementation process in PDF format for easy printing:ĭepending on the size of your organization, you’ll have to write and structure a great deal of documents. This file is your reference point, as it will enable you to quickly find the documents you need at all times. In order to help you stay organized, the Toolkit provides a “List of documents” file that outlines the documents that are mandatory according to the standard, and explains which documents cover which clauses from the standard.

The basis of the Documentation Toolkit is an extensive assortment of documents, arranged in the course you should follow during your implementation. Still, I was curious to see what value could the Documentation Toolkit offer to someone that’s approaching this challenge for this first time. It’s important to note that I’m not an ISO 27001 expert. The Toolkit is available in several languages and will guide you through the whole process for a fraction of the cost of a consultant. The ISO 27001 Documentation Toolkit from 27001 Academy is here to help. You work for a small or medium company and you’d like to become compliant, but budget is always an issue.

Iso 27001 2013 toolkit