Information Security Management

ISO 27001

ISO 27001 provides a framework to protect data, manage risks, and demonstrate compliance to clients and others for whom you handle data and services.

Options

If you are looking for additional support in your ISO 27001 journey, then I offer the following;

Start Free

Free Templates

£0

The 14 mandatory documents. The starting point for any ISO 27001 project.

A great way to get started without the commitment.

Get free templates →

Templates

Full Toolkit

£85

130+ documents: policies, risk register, audit pack, staff communications and everything else you need to build a working ISO 27001-aligned ISMS.

View the toolkit →

Do-It-Yourself

DIY Course

£285

The Do-It-Yourself course introduces the ISO 27001 standard and its requirements, then shows you how to implement it, stage by stage.

Includes the full toolkit & email consultancy.

View the course →

More support?

Coaching

£3,500

I can guide you through ISO 27001 and help you tailor it to your business through a series of coaching workshops.

Includes the full toolkit, personal consultancy, and first-pass guarantee.

Explore coaching →

My Free ISO 27001 Tools

These tools can help you springboard into 27001.

Complexity Assessor

How Much & How Long?

ISO 27001 Complexity Calculator Screenshot
  • Complexity assessment analysis
  • Estimated costs & duration
  • Key risks

Gap Analysis

Where Do I Stand Now?

ISO 27001 Gap analysis toolkit screenshot
  • Get a report on your maturity
  • Learn strengths and weaknesses
  • Prioritised action suggestions

Control Evaluation

Which Controls Apply?

ISO 27001 Annex A Applicability Screenshot
  • Get a report of the 93 controls
  • Learn which might apply to you
  • See which ones might not.

ISO 27001 Full Document Toolkit

Every document your auditor
expects to see.

130 Word & Excel templates, ready to edit. Policies, risk register, Statement of Applicability, audit pack, staff communications — all updated for ISO 27001:2022.

130 templates

Instant download

Written by practising consultant

ISO 27001:2022

ISO 27001 Articles

Everything you need to know about getting ISO 27001.


GUIDE

How to Create an ISO 27001 Supplier Review Process

My guide on how to create an ISO 27001 supplier review process. What you need to do and how frequently.

Read more →

GUIDE

ISO 27001 Nonconformity and Corrective Action Guide

Learn how to handle an ISO 27001 nonconformity and corrective actions. My guide steps you through how they work and what to do.

Read more →

GUIDE

ISO 27001 Myths Busted: 10 Things People Get Wrong

ISO 27001 is widely misunderstood — too big, too expensive, too IT-focused. We bust 10 of the most persistent myths with facts, figures, and plain English.

Read more →

GUIDE

ISO 27001 for Law Firms: What You Need to Know

Law firms hold some of the most sensitive data imaginable. This guide explains how ISO 27001 applies to legal practices, what clients expect, and how to get certified.

Read more →

GUIDE

What is ISO 27001 2022? What Changed From 2013

What is ISO 27001 2022 version? This guide explains what changed, what stayed the same, and what it means for organisations pursuing or maintaining certification.

Read more →

GUIDE

Do I Need ISO 27001? How to Decide

Asking yourself; Do I need ISO 27001? This guide walks you through the common triggers, who it's really for, and how to make the decision objectively.

Read more →

GUIDE

ISO 27001 for SaaS Companies: A Practical Guide

ISO 27001 is increasingly a must-have for SaaS companies winning enterprise deals. This guide explains what it means in practice for software businesses.

Read more →

GUIDE

ISO 27001 for Small Businesses: A Practical Guide

This guide explains how ISO 27001 for small businesses can make sense and how to implement and certify without a big budget or a dedicated compliance team.

Read more →

GUIDE

ISO 27001 for Startups: What You Need to Know

How we target ISO 27001 can differ between different types of businesses, and where you are on that journey. Learn how I approach ISO 27001 for startups.

Read more →

GUIDE

The ICO Fined Capita £14 Million. Here’s What It Means for Smaller Businesses.

In October 2025, Capita received the ICO's largest ever fine — and ISO 27001 was specifically mentioned in the findings. Here's what UK SMEs should take from it

Read more →

GUIDE

Why ISO 27001 Isn’t Just for Big Businesses

Plain-English guidance on why iso 27001 isn t just for big businesses for organisations working towards ISO 27001, with practical examples, checklists and templates for smaller teams.

Read more →