Professional ISMS documentation, ready to adapt
Editable templates and tools to implement and manage an information security management system based on ISO/IEC 27001:2022. In Word and Excel, with no macros.
Buy the toolkit · US$59Secure payment and instant download on Payhip.
⬇ Download the free sample: risk matrix in Excel
- 43 Word documents
- 35 Excel tools
- 22 topic-specific policies
- 16 completed examples
- Instant download
- Free sample to try first
- Editable Word and Excel, no macros
- Support: hola@nexodocs.com
See the toolkit in 25 seconds
A real walk-through of the files: Word documents, Excel matrices and the evidence dashboard, exactly as you will receive them.
- 84 files organized by stage
- Completed examples for a fictitious company
- Formulas that calculate risk and progress
Narrated with an AI-generated voice.
What's inside
Start here
Customization guide, phased implementation guide and a master index with links to every file.
Context and scope
Context analysis, interested parties, legal requirements, ISMS scope and process map.
Risk
Risk methodology, risk matrix with heat map, treatment plan and Statement of Applicability.
Policies
A general information security policy and 22 topic-specific policies with roles, verifiable rules and monitoring records.
Operation and evidence
Evidence register with a progress dashboard, incidents, suppliers, objectives and metrics.
Audit and improvement
Internal audit program, checklist and report, management review minutes and nonconformity register.
ISO 27001, 42001 and 27701 guides
Free generative AI acceptable use policy template for staff
Free Word template of a generative AI acceptable use policy for staff: approved tools, permitted data, rules, responsibilities and records.
AI literacy: what Article 4 of the EU AI Act requires and how to comply
What Article 4 of the EU AI Act requires on staff AI literacy, who it applies to, what training to cover by role and what evidence to keep.
How to set up a PMO in 90 days: a step-by-step plan
A 90-day plan to create or relaunch a small PMO: which type to choose, what to do each month, which documents to require, KPIs that show value and common mistakes.
How much does ISO 27001 cost? Toolkit, consultant or software
Real costs to implement and certify ISO 27001 in a small business: audit, consultant, compliance software or a template toolkit, compared in one table.
ISO 27001 internal audit checklist: free Excel template
Free ISO/IEC 27001:2022 internal audit checklist in Excel: clauses 4 to 10 and Annex A controls, how to grade findings and what evidence to ask for.
ISO 27001:2022 mandatory documents and records: checklist by clause
Checklist of the documents and records ISO/IEC 27001:2022 requires, clause by clause, which Annex A documents apply and common audit gaps.
ISO 27001:2022 required policies: the mandatory one and the topic-specific policies
Which policies ISO/IEC 27001:2022 requires: the information security policy (5.2), the Annex A topic-specific policies and how to decide which you need.
ISO 27001 risk assessment template: what it must include and how to use it
What ISO/IEC 27001:2022 requires for risk assessment, the columns an ISMS risk register needs, and how to calculate risk levels. Includes a free Excel sample.
ISO 27001 Statement of Applicability (SoA): example, template and how to write it
What the ISO/IEC 27001:2022 Statement of Applicability must contain, a worked example, 2013 vs 2022 changes, how auditors review it and an Excel template.
ISO 27701:2025: what changed and what to do now
ISO/IEC 27701:2025 is now a standalone privacy management standard: what changed from 2019, the new Annex A (78 controls) and transition dates.
ISO 27701:2025 mandatory documents
Documented information ISO/IEC 27701:2025 requires: scope, policy, risk, Statement of Applicability, records and evidence, with the clause for each.
ISO 27701 vs GDPR: what is the difference?
ISO/IEC 27701 is a voluntary, certifiable standard; the GDPR is EU law. How they differ, where they overlap and how ISO 27701 organizes GDPR evidence.
ISO 42001 mandatory documents (AI management system)
The documented information ISO/IEC 42001:2023 requires for an AI management system, with the clause for each document and the records auditors ask for.
RACI matrix template: free Excel with a project and PMO example
Free RACI matrix template in Excel with 15 project and PMO activities: what R, A, C and I mean, how to fill it in, built-in checks and common mistakes to avoid.
Record of processing activities (GDPR Article 30): what to include and when to run a DPIA
What a record of processing activities (GDPR Article 30) must include, who must keep one, when a DPIA is needed and how it fits ISO 27701.
What is an ISMS and how do you implement it with ISO 27001?
What an information security management system (ISMS) is, what ISO/IEC 27001:2022 requires, which documents you need and how certification works.
What is ISO/IEC 42001? The artificial intelligence management system
What ISO/IEC 42001:2023 is, who it is for, clauses 4 to 10, the 38 Annex A controls and how it relates to ISO 27001 and the EU AI Act.
More NexoDocs products
AI literacy course for staff
6 video modules · 24 assessment questions
Buy the course · US$49
Document your ISMS and train your staff
84 toolkit files · 8 videos with examples
Buy the bundle · US$89
Document your privacy management system and train your staff
61 toolkit files · 8 videos with examples
Buy the bundle · US$99
ISO 27701 Toolkit: documentation for your privacy management system
38 Word documents · 15 Excel tools
Buy the toolkit · US$69
Document your AI management system and train your staff
67 toolkit files · 6 video modules
Buy the bundle · US$89
ISO 42001 Toolkit: documentation for your AI management system
30 Word documents · 31 Excel tools
Buy the toolkit · US$59
PMO and Project Management Toolkit: templates to run projects and set up a PMO
13 Word documents · 6 Excel tools
Buy the toolkit · US$39
Privacy and data protection training course
8 videos (≈ 40 min) · 40+ visual examples
Buy the course · US$49
Information security awareness course
8 videos (≈ 60 min) · 60+ visual examples
Buy the course · US$49Try before you buy
Download a reduced version of the toolkit's risk matrix for free (Excel, 10 scenarios, heat map). See how it calculates risk level and category before you decide.
Get the free sampleHow it works
Download and unzip
One ZIP file with numbered folders that follow the ISMS cycle.
Customize once
Set your organization's name, logo and details; global fields and a CONFIGURATION sheet guide you.
Adapt to your reality
Complete the templates with your context, risks and decisions. The NubeSur examples show the expected level of detail.
Run and improve
Use the Excel tools to track risks, evidence, metrics and audits.
Who it is for
- ISMS managers and information security officers
- Consultants who support ISO/IEC 27001 projects
- IT, compliance and risk teams in small and medium organizations
- Organizations preparing their first ISMS
What it is not
Available editions
The toolkit is available in English, Spanish, German, French, Italian and Brazilian Portuguese. Each edition is a separate purchase.
Frequently asked questions
Does the toolkit guarantee ISO/IEC 27001 certification?
No. Certification depends on how the ISMS is actually implemented and on the assessment by the certification body.
Which version of the standard does it cover?
ISO/IEC 27001:2022 and its Amendment 1:2024 (climate action changes).
What software do I need?
A program that opens Word (.docx) and Excel (.xlsx) files. The files contain no macros or add-ins. The publisher tested the files in Microsoft Word and Excel and in LibreOffice; Google Docs and Google Sheets have not been tested.
How many organizations does the license cover?
One organization, including its departments and sites, with no limit on internal users. External consultants may use it only to work on your organization's ISMS.
How long does it take?
Initial customization takes about 2 to 3 hours, as an estimate. Implementing an ISMS usually takes several months depending on your starting point.
How were the translated editions produced?
The German, French, Italian and Brazilian Portuguese editions were produced with substantial AI assistance and several layers of AI-assisted linguistic quality control. Every file was opened and recalculated without errors in Microsoft Word and Excel 16 (Windows). They have not been reviewed by a human native speaker.
Updates and new editions
The toolkit is on sale now. Leave your email to hear about updates, new editions and related NexoDocs products.