Free resources from Iseo Blue
ISO 27001 Tools
Getting started with ISO 27001 raises many questions before you’re ready to speak with a consultant or certification body. These free tools help you answer the most important ones yourself — in about 15 minutes total.
Three tools. No sign-up required. Results you can print and keep.
Free Tool
ISMS Project Complexity Assessor
Find out how complex your ISO 27001 journey is likely to be.
Certification bodies like BSI and LRQA assess your organisation’s complexity before quoting for an audit – factoring in your size, data sensitivity, regulatory exposure, and supplier relationships.
This tool mirrors that thinking and gives you a personalised complexity tier, estimated audit duration, and your key risk drivers before you’ve spoken to anyone.
Start ISO 27001 like a pro.
✔️ Understand the complexity drivers for your ISMS.
✔️ Get estimated audit & project durations.
✔️ See indicative costs
Free Tool
ISMS Gap Analysis
Understand where you stand against ISO 27001 requirements
Before you can plan an implementation, you need to know what you already have in place and what’s missing.
This self-assessment evaluates your current posture across all mandatory ISO 27001 clauses (4–10) and a representative sample of Annex A controls, then produces a maturity heatmap, section-by-section gap summary, and a prioritised action list.
✔️ View your exposures at a glance.
✔️Priority actions list weighted towards where auditors will focus
✔️ honest signals of how far you are from being audit-ready
Free Tool
Annex A Applicability Checker
Find out which of the 93 ISO 27001 controls actually apply to you
ISO 27001:2022 Annex A contains 93 controls – but not all of them apply to every organisation. A small cloud-only company has a very different control set to a manufacturer with on-premise servers and a development team.
This tool profiles your organisation and filters the full control list down to the controls most likely to apply, with plain-English descriptions and a relevance explanation for each one.
✔️ Filtered list of applicable controls from all 93
✔️ Plain-English explanation of each control
✔️ A powerful starting point for your Statement of Applicability
My FREE Information Security Toolkit
Every mandatory document template
ISO 27001 Compliant
Helping Small B2B Teams
Get ISO 27001 Certified
in 90 days