Free resources
Everything you can use without paying: a real sample of our templates, a policy ready to adapt and practical guides. Use them to start today and to see how we work before you decide.
Templates to download
Download the free sample: risk matrix in Excel
Download a reduced version of the toolkit's risk matrix for free (Excel, 10 scenarios, heat map). See how it calculates risk level and category before you decide. Downloaded from our Payhip store, which asks for an email address to send you the file.
Get the free sampleAI acceptable use policy template (Word)
Acceptable use policy for generative AI for your staff: approved tools, allowed data, rules and responsibilities. Direct download, no email needed.
Practical guides
Direct answers, tables and examples, checked with the process described on our About page.
ISO 27001 internal audit checklist: free Excel template
Free ISO/IEC 27001:2022 internal audit checklist in Excel: clauses 4 to 10 and Annex A controls, how to grade findings and what evidence to ask for.
Read the guide →ISO 27001 risk assessment template: what it must include and how to use it
What ISO/IEC 27001:2022 requires for risk assessment, the columns an ISMS risk register needs, and how to calculate risk levels. Includes a free Excel sample.
Read the guide →ISO 27001:2022 mandatory documents and records: checklist by clause
Checklist of the documents and records ISO/IEC 27001:2022 requires, clause by clause, which Annex A documents apply and common audit gaps.
Read the guide →ISO 27001 Statement of Applicability (SoA): example, template and how to write it
What the ISO/IEC 27001:2022 Statement of Applicability must contain, a worked example, 2013 vs 2022 changes, how auditors review it and an Excel template.
Read the guide →How much does ISO 27001 cost? Toolkit, consultant or software
Real costs to implement and certify ISO 27001 in a small business: audit, consultant, compliance software or a template toolkit, compared in one table.
Read the guide →ISO 42001 mandatory documents (AI management system)
The documented information ISO/IEC 42001:2023 requires for an AI management system, with the clause for each document and the records auditors ask for.
Read the guide →ISO 27701:2025 mandatory documents
Documented information ISO/IEC 27701:2025 requires: scope, policy, risk, Statement of Applicability, records and evidence, with the clause for each.
Read the guide →How to set up a PMO in 90 days: a step-by-step plan
A 90-day plan to create or relaunch a small PMO: which type to choose, what to do each month, which documents to require, KPIs that show value and common mistakes.
Read the guide →RACI matrix template: free Excel with a project and PMO example
Free RACI matrix template in Excel with 15 project and PMO activities: what R, A, C and I mean, how to fill it in, built-in checks and common mistakes to avoid.
Read the guide →