ElevateQCS Quality & Compliance Products

Resources aligned with the named frameworks for organization-specific adaptation. ISO standards are sold separately by ISO or national standards bodies. DORA and NIS2 resources are not legal advice.

Acceptable Use Policy for ISO/IEC 27001:2022

Defines acceptable use of your organization's information, systems, devices and services. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Acceptable Use Policy for SOC 2

Acceptable Use Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Access Control and Identity Management Policy for DORA (Financial Entities)

Ensures only authorized people and systems access your information and ICT assets. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Access Control Policy for ISO/IEC 27001:2022

Makes sure access to information and systems is limited to authorized users with a business need. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Access Control Policy for NIST 800-171 / CMMC

Access Control Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Access Control Policy for SOC 2

Access Control Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Access Provisioning and Review Procedure for ISO/IEC 27001:2022

Grants, changes, reviews and removes access correctly and on time. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Access Request and Approval Form for NIST 800-171 / CMMC

Access Request and Approval Form. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Access Request and Review Form for ISO/IEC 27001:2022

Requests access and records periodic access reviews. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Access Request Form for SOC 2

Access Request Form. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Access Review Record for NIST 800-171 / CMMC

Access Review Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Access Review Record for SOC 2

Access Review Record. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Account Management and Access Review Procedure for NIST 800-171 / CMMC

Account Management and Access Review Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Accuracy, Robustness and Cybersecurity Testing Procedure for EU AI Act

Accuracy, Robustness and Cybersecurity Testing Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Acting as a Processor Procedure for EU GDPR

Acting as a Processor Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

AI Acceptable Use Policy for EU AI Act

AI Acceptable Use Policy. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI and Personal Data Awareness Deck for GDPR for AI

AI and Personal Data Awareness Deck. Editable PowerPoint deck aligned with the GDPR as it applies to AI.

AI Breach Record for GDPR for AI

AI Breach Record. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Change and Substantial Modification Procedure for EU AI Act

AI Change and Substantial Modification Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Concern Report for ISO/IEC 42001

AI Concern Report. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Contract and Mandate Clauses for EU AI Act

AI Contract and Mandate Clauses. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Control Matrix Additions for SOC 2 + AI

AI Control Matrix Additions. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Data Governance Policy for EU AI Act

AI Data Governance Policy. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Data Management Policy for ISO/IEC 42001

AI Data Management Policy. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Data Protection Policy for GDPR for AI

AI Data Protection Policy. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Data Protection Program Manual for GDPR for AI

AI Data Protection Program Manual. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Data Protection RACI for GDPR for AI

AI Data Protection RACI. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Data Protection Registers Workbook (RoPA, LLM risks, retention) for GDPR for AI

AI Data Protection Registers Workbook (RoPA, LLM risks, retention). Editable Excel workbook aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Governance Bundle — Complete

Includes the EU AI Act, ISO/IEC 42001, NIST AI RMF and GDPR for AI kits in the Complete edition, with worked examples, training materials, industry annexes and video guides. Not legal advice.

AI Governance Internal Audit Procedure for EU AI Act

AI Governance Internal Audit Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Governance Management Review Procedure for EU AI Act

AI Governance Management Review Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Governance Manual for EU AI Act

AI Governance Manual. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Governance RACI for EU AI Act

AI Governance RACI. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Impact Assessment Form for NIST AI RMF

AI Impact Assessment Form. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Impact Assessment Procedure for NIST AI RMF

AI Impact Assessment Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI in SOC 2 Awareness Deck for SOC 2 + AI

AI in SOC 2 Awareness Deck. Editable PowerPoint deck aligned with SOC 2 with AI systems in scope.

AI Incident Communication Record for ISO/IEC 42001

AI Incident Communication Record. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Incident Report for NIST AI RMF

AI Incident Report. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Incident Response and Communication Procedure for NIST AI RMF

AI Incident Response and Communication Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Input, Processing and Output Integrity Procedure for SOC 2 + AI

AI Input, Processing and Output Integrity Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Intake and Categorization Form for NIST AI RMF

AI Intake and Categorization Form. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Inventory and Categorization Procedure for NIST AI RMF

AI Inventory and Categorization Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Inventory and Registers Workbook for EU AI Act

AI Inventory and Registers Workbook. Editable Excel workbook aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Literacy Awareness Deck for EU AI Act

AI Literacy Awareness Deck. Editable PowerPoint deck aligned with the EU AI Act (Regulation (EU) 2024/1689).

AI Literacy Policy for EU AI Act

AI Literacy Policy. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Literacy Quiz for EU AI Act

AI Literacy Quiz. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

AI Literacy Training Record for EU AI Act

AI Literacy Training Record. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Management System Manual for ISO/IEC 42001

AI Management System Manual. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Model and Training Data Change Procedure for SOC 2 + AI

AI Model and Training Data Change Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Model Anonymity Assessment Procedure for GDPR for AI

AI Model Anonymity Assessment Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Model Change Record for SOC 2 + AI

AI Model Change Record. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Monitoring and Anomaly Procedure for SOC 2 + AI

AI Monitoring and Anomaly Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Objectives and Planning of Changes Procedure for ISO/IEC 42001

AI Objectives and Planning of Changes Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Output Validation Log for SOC 2 + AI

AI Output Validation Log. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Personal Data Breach Procedure for GDPR for AI

AI Personal Data Breach Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Policy for EU AI Act

AI Policy. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Policy for ISO/IEC 42001

AI Policy. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Pre-Audit Checklist for SOC 2 + AI

AI Pre-Audit Checklist. Editable Excel workbook aligned with SOC 2 with AI systems in scope.

AI Privacy Notice Sections for GDPR for AI

AI Privacy Notice Sections. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Processing Agreement and Vendor Clauses for GDPR for AI

AI Processing Agreement and Vendor Clauses. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Processing Intake and Role Form for GDPR for AI

AI Processing Intake and Role Form. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Provider and Subservice Organization Procedure for SOC 2 + AI

AI Provider and Subservice Organization Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Provider Review for SOC 2 + AI

AI Provider Review. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Registers Workbook for SOC 2 + AI

AI Registers Workbook. Editable Excel workbook aligned with SOC 2 with AI systems in scope.

AI Relevance and System Description Procedure for SOC 2 + AI

AI Relevance and System Description Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Relevance Assessment for SOC 2 + AI

AI Relevance Assessment. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Resource Documentation Procedure for ISO/IEC 42001

AI Resource Documentation Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Risk Assessment and Treatment Procedure for ISO/IEC 42001

AI Risk Assessment and Treatment Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Risk Assessment Procedure for SOC 2 + AI

AI Risk Assessment Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Risk Awareness Deck for NIST AI RMF

AI Risk Awareness Deck. Editable PowerPoint deck aligned with the NIST AI RMF 1.0.

AI Risk Awareness Quiz for NIST AI RMF

AI Risk Awareness Quiz. Editable Word file aligned with the NIST AI RMF 1.0.

AI Risk Management Policy for NIST AI RMF

AI Risk Management Policy. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Risk Management Procedure for EU AI Act

AI Risk Management Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Risk Management Program Manual for NIST AI RMF

AI Risk Management Program Manual. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Risk Registers Workbook for NIST AI RMF

AI Risk Registers Workbook. Editable Excel workbook aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Risk Roles RACI for NIST AI RMF

AI Risk Roles RACI. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Risk Training Record for NIST AI RMF

AI Risk Training Record. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Risk, Data and Testing Workbook for EU AI Act

AI Risk, Data and Testing Workbook. Editable Excel workbook aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI RMF Profile Template (Current and Target) for NIST AI RMF

AI RMF Profile Template (Current and Target). Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI RMF Profile Workbook (Current vs Target) for NIST AI RMF

AI RMF Profile Workbook (Current vs Target). Editable Excel workbook aligned with the NIST AI RMF 1.0.

AI Roles and Responsibilities RACI for ISO/IEC 42001

AI Roles and Responsibilities RACI. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Security and LLM Privacy Risk Procedure for GDPR for AI

AI Security and LLM Privacy Risk Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Security Testing Procedure for SOC 2 + AI

AI Security Testing Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Supplier and Customer Clauses for ISO/IEC 42001

AI Supplier and Customer Clauses. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Supplier Assessment for ISO/IEC 42001

AI Supplier Assessment. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Supplier Due Diligence Questionnaire for EU AI Act

AI Supplier Due Diligence Questionnaire. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Supplier, Importer and Distributor Procedure for EU AI Act

AI Supplier, Importer and Distributor Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI System Deployment Approval for ISO/IEC 42001

AI System Deployment Approval. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI System Deployment Plan Template for ISO/IEC 42001

AI System Deployment Plan Template. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI System Description Addendum for SOC 2 + AI

AI System Description Addendum. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI System Identification, Scope and Role Procedure for EU AI Act

AI System Identification, Scope and Role Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI System Impact Assessment Form for ISO/IEC 42001

AI System Impact Assessment Form. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI System Impact Assessment Procedure for ISO/IEC 42001

AI System Impact Assessment Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI System Intake Form for EU AI Act

AI System Intake Form. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI System Life Cycle Procedure for ISO/IEC 42001

AI System Life Cycle Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI System Operation, Monitoring and Logging Procedure for ISO/IEC 42001

AI System Operation, Monitoring and Logging Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI System Register Entry Form for ISO/IEC 42001

AI System Register Entry Form. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI System Requirements Specification Template for ISO/IEC 42001

AI System Requirements Specification Template. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI System Risk Classification Procedure for EU AI Act

AI System Risk Classification Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI System Technical Documentation Template for ISO/IEC 42001

AI System Technical Documentation Template. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AI Transparency and Disclosure Policy for EU AI Act

AI Transparency and Disclosure Policy. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

AI Transparency and Human Validation Procedure for SOC 2 + AI

AI Transparency and Human Validation Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Transparency Notice Template for NIST AI RMF

AI Transparency Notice Template. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

AI Use and Governance Policy (SOC 2) for SOC 2 + AI

AI Use and Governance Policy (SOC 2). Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

AI Vendor and Model Provenance Assessment for GDPR for AI

AI Vendor and Model Provenance Assessment. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AI Vendor, Processor and Transfer Procedure for GDPR for AI

AI Vendor, Processor and Transfer Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

AIMS Awareness Deck for ISO/IEC 42001

AIMS Awareness Deck. Editable PowerPoint deck aligned with ISO/IEC 42001:2023.

AIMS Awareness Quiz for ISO/IEC 42001

AIMS Awareness Quiz. Editable Word file aligned with ISO/IEC 42001:2023.

AIMS Change Request for ISO/IEC 42001

AIMS Change Request. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AIMS Registers Workbook (incl. Statement of Applicability) for ISO/IEC 42001

AIMS Registers Workbook (incl. Statement of Applicability). Editable Excel workbook aligned with ISO/IEC 42001:2023. Includes a completed worked example.

AIMS Scope Statement Template for ISO/IEC 42001

AIMS Scope Statement Template. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Annual Data Protection Audit Checklist for EU GDPR

Annual Data Protection Audit Checklist. Editable Excel workbook aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Article 22 Assessment and Human Review Record for GDPR for AI

Article 22 Assessment and Human Review Record. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Article 22 Assessment for EU GDPR

Article 22 Assessment. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Article 30 Contract Clause Checklist for DORA (Financial Entities)

Checks every ICT contract against the DORA minimum terms. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Assessment Preparation and Evidence Procedure for NIST 800-171 / CMMC

Assessment Preparation and Evidence Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Assessment Readiness Checklist for NIST 800-171 / CMMC

Assessment Readiness Checklist. Editable Excel workbook aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Assessor Interview Preparation Sheet for NIST 800-171 / CMMC

Assessor Interview Preparation Sheet. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Asset Disposal Record for ISO/IEC 27001:2022

Records secure wiping or destruction of equipment and media. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Asset Management and Information Classification Policy for ISO/IEC 27001:2022

Identifies information assets, assigns owners and protects information according to its classification. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Asset Management Policy for SOC 2

Asset Management Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Audit Access and Inspection Procedure for DORA (ICT Service Providers)

Handles audits and inspections by clients, their appointed auditors and competent authorities efficiently and securely. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Audit and Accountability Policy for NIST 800-171 / CMMC

Audit and Accountability Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Audit and Inspection Request Log for DORA (ICT Service Providers)

Logs and tracks audit, inspection and information requests from clients, auditors and authorities. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Audit Logging and Review Procedure for NIST 800-171 / CMMC

Audit Logging and Review Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Audit Preparation and Evidence Management Procedure for SOC 2

Audit Preparation and Evidence Management Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Audit Success Announcement Kit for ISO 14001:2026

Ready-to-edit wording for telling customers, staff and partners about your ISO 14001:2026 work, kept accurate and free of overstatement. Editable Word file aligned with ISO 14001:2026.

Audit Success Announcement Kit for ISO 9001:2026

Ready-to-edit wording for telling customers, staff and partners about your ISO 9001:2026 work, kept accurate and free of overstatement. Editable Word file aligned with ISO 9001:2026.

Audit Success Announcement Kit for ISO/IEC 27001:2022

Ready-to-edit wording for telling customers, staff and partners about your ISO/IEC 27001:2022 work, kept accurate and free of overstatement. Editable Word file aligned with ISO/IEC 27001:2022.

Auditor Interview Preparation Sheet for EU AI Act

Auditor Interview Preparation Sheet. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

Auditor Interview Preparation Sheet for ISO 14001:2026

Helps leaders and staff prepare for auditor interviews with real examples. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Auditor Interview Preparation Sheet for ISO 9001:2026

Helps top management, process owners and operators prepare for transition-audit interviews on the ISO 9001:2026 changes, using honest answers based on real examples. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Auditor Interview Preparation Sheet for ISO/IEC 27001:2022

Prepares people for auditor interviews with likely questions and strong answers. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Auditor Interview Preparation Sheet for ISO/IEC 42001

Auditor Interview Preparation Sheet. Editable Word file aligned with ISO/IEC 42001:2023.

Auditor Interview Preparation Sheet for NIST AI RMF

Auditor Interview Preparation Sheet. Editable Word file aligned with the NIST AI RMF 1.0.

Auditor Interview Preparation Sheet for SOC 2

Auditor Interview Preparation Sheet. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Auditor Interview Preparation Sheet for SOC 2 + AI

Auditor Interview Preparation Sheet. Editable Word file aligned with SOC 2 with AI systems in scope.

Authority Cooperation Procedure for EU AI Act

Authority Cooperation Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Automated Decision Explanation Template for GDPR for AI

Automated Decision Explanation Template. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Automated Decision-Making (Article 22) Procedure for GDPR for AI

Automated Decision-Making (Article 22) Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Automated Decision-Making and Profiling Procedure for EU GDPR

Automated Decision-Making and Profiling Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Awareness and Training Policy for NIST 800-171 / CMMC

Awareness and Training Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Awareness Quiz and Answer Key for ISO 14001:2026

Checks that people understand the EMS essentials. Editable Word file aligned with ISO 14001:2026.

Awareness Quiz and Answer Key for ISO 9001:2026

Checks understanding after the awareness briefing and keeps evidence of effectiveness of awareness training (7.2 / 7.3). Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Awareness Quiz and Answer Key for ISO/IEC 27001:2022

Checks understanding after awareness training. Editable Word file aligned with ISO/IEC 27001:2022.

Awareness Quiz for EU GDPR

Awareness Quiz. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Awareness Quiz for GDPR for AI

Awareness Quiz. Editable Word file aligned with the GDPR as it applies to AI.

Awareness Quiz for NIST 800-171 / CMMC

Awareness Quiz. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Awareness Quiz for SOC 2 + AI

Awareness Quiz. Editable Word file aligned with SOC 2 with AI systems in scope.

Awareness Training Record for ISO 14001:2026

Records training and awareness sessions. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Awareness Training Record for ISO 9001:2026

Records delivery of QMS awareness, including quality culture and ethical behavior, to people working under the organization's control. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Awareness Training Record for ISO/IEC 27001:2022

Records attendance and understanding of security awareness sessions. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Background Check Confirmation for SOC 2

Background Check Confirmation. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Backup and Restoration Policy for DORA (Financial Entities)

Restores systems and data within recovery objectives with minimum loss. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Backup Policy for ISO/IEC 27001:2022

Makes sure information can be recovered after loss, corruption or attack. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Backup, Business Continuity and DR Testing Procedure for SOC 2

Backup, Business Continuity and DR Testing Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Bias and Fairness Testing Record for ISO/IEC 42001

Bias and Fairness Testing Record. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Biodiversity and Ecosystems Procedure for ISO 14001:2026

Identifies how your site, activities and supply chain affect, and are affected by, biodiversity and ecosystems, and acts where significant. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Biodiversity and Ecosystems Screening for ISO 14001:2026

Screens how your site, activities and supply chain affect, and are affected by, biodiversity and ecosystems. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Boundary Protection and Encryption Procedure for NIST 800-171 / CMMC

Boundary Protection and Encryption Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Breach Notification Templates for EU GDPR

Breach Notification Templates. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Breach Record and Risk Assessment for EU GDPR

Breach Record and Risk Assessment. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Business Continuity and Disaster Recovery Policy for SOC 2

Business Continuity and Disaster Recovery Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Business Continuity and Exit Support Procedure for DORA (ICT Service Providers)

Keeps client services resilient and supports clients' exit strategies, including a transition period and data return. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Business Continuity and ICT Readiness Policy for ISO/IEC 27001:2022

Maintains information security and ICT services during disruption. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Business Continuity and ICT Readiness Procedure for ISO/IEC 27001:2022

Plans, tests and improves recovery of critical services while keeping security in place. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Business Continuity Plan for ISO/IEC 27001:2022

Activation, recovery targets (RTO/RPO), response steps and testing, aligned with ISO/IEC 27001:2022 Annex A 5.29–5.30. Includes a worked example.

Business Impact Analysis and Continuity Testing Procedure for DORA (Financial Entities)

Analyzes the impact of disruption and tests that you can recover critical or important functions. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Capacity Management Procedure for SOC 2

Capacity Management Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Certification Audit Readiness Checklist for ISO/IEC 42001

Certification Audit Readiness Checklist. Editable Excel workbook aligned with ISO/IEC 42001:2023.

Certification Evidence Checklist for ISO/IEC 27001:2022

Prepares the evidence a certification body typically reviews at stage 1 and stage 2 audits. Editable Word file aligned with ISO/IEC 27001:2022.

Certification Readiness Checklist for ISO/IEC 27001:2022

Confirms the ISMS is ready for the certification audit. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Certification Readiness Pack for ISO/IEC 27001:2022

Includes 5 editable Word files from the full kit: Management Review Agenda and Minutes, Internal Audit Plan and Report, Certification Readiness Checklist, Certification Evidence Checklist and 1 more.

Change and Configuration Management Policy for ISO/IEC 27001:2022

Controls changes and configurations so they don't weaken security or availability. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Change and Substantial Modification Assessment for EU AI Act

Change and Substantial Modification Assessment. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Change Management Policy for SOC 2

Change Management Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Change Management Procedure for SOC 2

Change Management Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Change Planning Record for ISO 14001:2026

Plans, approves and reviews changes that affect or could affect the EMS. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Change Planning Record for ISO 9001:2026

Plans, communicates, monitors and reviews changes to the QMS in a controlled way, as required by ISO 9001:2026 clause 6.3. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Change Request and Security Impact Assessment for ISO/IEC 27001:2022

Plans and assesses changes affecting the ISMS. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Change Request Form for NIST 800-171 / CMMC

Change Request Form. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Change Request Form for SOC 2

Change Request Form. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Clear Desk and Clear Screen Policy for ISO/IEC 27001:2022

Reduces the risk of unauthorized access to information on desks and screens. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Client Audit Interview Preparation Sheet for DORA (ICT Service Providers)

Helps staff prepare for audits and inspections by financial clients and their supervisors. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Client Audit Readiness Checklist for DORA (ICT Service Providers)

Checks you can answer a financial client's audit or due diligence quickly. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Client DORA Questionnaire Response Template (ICT Service Providers)

Answers common DORA due diligence questions consistently. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Client Exit Plan for DORA (ICT Service Providers)

Plans an orderly exit for a financial client, including a transition period and data return. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Client Incident Notification Form for DORA (ICT Service Providers)

Notifies a financial client of an incident with the information they need for classification and reporting. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Client Incident Notification Pack for DORA (ICT Service Providers)

Includes 2 editable Word files from the full kit: Client Incident Notification Form, Client Incident Notification Procedure. Worked examples included.

Client Incident Notification Procedure for DORA (ICT Service Providers)

Notifies and assists financial clients quickly enough for them to classify incidents and meets their DORA reporting deadlines. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Client Notification of Major Incident for DORA (Financial Entities)

Informs clients without undue delay about a major incident affecting their financial interests. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Climate Change Determination for ISO 9001:2026

Records whether climate change is a relevant issue for the QMS, the reasoning, and where it affects risks, processes and objectives. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Climate Change Determination for ISO/IEC 27001:2022

Records whether climate change is a relevant issue for the ISMS and how it is addressed. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Cloud Services Policy for ISO/IEC 27001:2022

Manages security in the acquisition, use, management and exit of cloud services. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

CNIL-aligned AI Development Checklist for GDPR for AI

CNIL-aligned AI Development Checklist. Editable Excel workbook aligned with the GDPR as it applies to AI.

Code of Conduct for SOC 2

Code of Conduct. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Communicating DORA Compliance (Financial Entities)

Ready-to-edit wording for telling customers, staff and partners about your DORA (Financial Entities) work, kept accurate and free of overstatement. Editable Word file aligned with DORA (Financial Entities).

Communicating DORA Readiness (ICT Service Providers)

Ready-to-edit wording for telling customers, staff and partners about your DORA (ICT Service Providers) work, kept accurate and free of overstatement. Editable Word file aligned with DORA (ICT Service Providers).

Communication Procedure for ISO 14001:2026

Plans and carries out internal and external environmental communication and responds to relevant communications. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Compatibility Assessment for Data Re-use for GDPR for AI

Compatibility Assessment for Data Re-use. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Compatibility Assessment for Further Processing for EU GDPR

Compatibility Assessment for Further Processing. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Competence and Awareness Record for ISO/IEC 42001

Competence and Awareness Record. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Competence, Awareness and Communication Procedure for ISO/IEC 27001:2022

Makes sure people are competent and aware, and that security communications are planned. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Competence, Awareness and Communication Procedure for ISO/IEC 42001

Competence, Awareness and Communication Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Competence, Training and Awareness Procedure for ISO 14001:2026

Makes sure people whose work affects environmental performance or compliance are competent and aware. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Competence, Training and Awareness Procedure for ISO 9001:2026

Ensures people doing work that affects quality are competent, trained, aware of the policy, objectives, their contribution, implications of nonconformity, and quality culture and ethical behavior. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Competent Authority Notification on ICT Arrangements for DORA (Financial Entities)

Notifies the competent authority about ICT contractual arrangements as DORA requires. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Compliance Obligations and Evaluation of Compliance Procedure for ISO 14001:2026

Identifies, accesses and applies your compliance obligations and periodically evaluates whether you meet them. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Confidential Information Handling and Disposal Procedure for SOC 2

Confidential Information Handling and Disposal Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Configuration Baseline and Change Control Procedure for NIST 800-171 / CMMC

Configuration Baseline and Change Control Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Configuration Management Policy for NIST 800-171 / CMMC

Configuration Management Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Conformity Assessment, Declaration, CE Marking and Registration Procedure for EU AI Act

Conformity Assessment, Declaration, CE Marking and Registration Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Consent Management Procedure for EU GDPR

Consent Management Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Context and Interested Parties Register for ISO 14001:2026

Records internal and external issues, environmental conditions, interested parties and their needs and expectations, and which become compliance obligations. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Context and Interested Parties Register for ISO 9001:2026

Records the external and internal issues relevant to your purpose and strategic direction, the relevant interested parties and their requirements, and which of those requirements you address through the QMS. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Context and Interested Parties Register for ISO/IEC 27001:2022

Records internal and external issues, interested parties and their requirements, and which are addressed through the ISMS. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Context Mapping Procedure for NIST AI RMF

Context Mapping Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Context of the Organization Procedure for ISO 9001:2026

Defines how your organization determines, monitors and reviews the internal and external issues (including climate change) and the interested parties and their relevant requirements that affect the QMS, and how this information sets scope and drives planning. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Context, Interested Parties and Scope Procedure for ISO 14001:2026

Defines how your organization determines its context — including environmental conditions — its interested parties and their needs and expectations, and the scope of the EMS. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Context, Interested Parties and Scope Procedure for ISO/IEC 27001:2022

Defines how your organization determines its context (including whether climate change is relevant), interested parties and their requirements, and the scope of the ISMS. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Context, Interested Parties and Scope Procedure for ISO/IEC 42001

Context, Interested Parties and Scope Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Continuity and Disaster Recovery Test Record for ISO/IEC 27001:2022

Records continuity and disaster recovery tests. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Continuous Monitoring Procedure for NIST 800-171 / CMMC

Continuous Monitoring Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Contract Pack for DORA (ICT Service Providers)

Includes 3 editable Word files from the full kit: Financial Client Onboarding and Contract Review Procedure, DORA Contract Clause Checklist, Model DORA Contract Addendum. Worked examples included.

Control Matrix and Registers Workbook for SOC 2

Control Matrix and Registers Workbook. Editable Excel workbook aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Control Matrix Guide for SOC 2

Control Matrix Guide. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Control Monitoring and Internal Audit Procedure for SOC 2

Control Monitoring and Internal Audit Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Control of Documented Information Procedure for ISO 14001:2026

Creates, updates and controls EMS documented information. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Control of Documented Information Procedure for ISO 9001:2026

Controls the creation, approval, distribution, use, change, retention and disposal of documents and records, including documents of external origin. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Control of Documented Information Procedure for ISO/IEC 27001:2022

Controls ISMS documents and records so the right versions are available, protected and retained. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Control of Nonconforming Outputs Procedure for ISO 9001:2026

Identifies, segregates, evaluates and dispositions nonconforming outputs so they are not used or delivered unintentionally, including authorization under concession. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Cookie and Online Tracking Policy for EU GDPR

Cookie and Online Tracking Policy. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Cookie Banner and Cookie Notice Text for EU GDPR

Cookie Banner and Cookie Notice Text. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Cookies and Tracking Technologies Procedure for EU GDPR

Cookies and Tracking Technologies Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Corrective Action Record for EU AI Act

Corrective Action Record. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

CPA Firm Selection Guide and RFP for SOC 2

CPA Firm Selection Guide and RFP. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Crisis Communication Policy for DORA (Financial Entities)

Communicates responsibly with staff, clients, counterparties, authorities and the public during ICT-related incidents. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Critical or Important Functions Identification Procedure for DORA (Financial Entities)

Identifies which of your functions are critical or important and maps the ICT that supports them. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Crosswalk: 800-171 Rev 2 to Rev 3 and ISO/IEC 27001 for NIST 800-171 / CMMC

Crosswalk: 800-171 Rev 2 to Rev 3 and ISO/IEC 27001. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Cryptography Policy for ISO/IEC 27001:2022

Defines how cryptography protects information and how keys are managed. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

CUEC and Subservice Organization Template for SOC 2

CUEC and Subservice Organization Template. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

CUI and FCI Identification and Handling Procedure for NIST 800-171 / CMMC

CUI and FCI Identification and Handling Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

CUI Awareness and Insider Threat Deck for NIST 800-171 / CMMC

CUI Awareness and Insider Threat Deck. Editable PowerPoint deck aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

CUI Cybersecurity Program Manual for NIST 800-171 / CMMC

CUI Cybersecurity Program Manual. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

CUI Identification Record for NIST 800-171 / CMMC

CUI Identification Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Customer Evidence Pack Index for DORA (ICT Service Providers)

Lists the evidence you provide to financial clients during due diligence and audits. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Customer Requirements and Sales Procedure for ISO 9001:2026

Ensures customer communication, determination and review of requirements, acceptance of orders and handling of changes are controlled so you only commit to what you can deliver, including contingency information where relevant. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Customer Satisfaction Survey for ISO 9001:2026

Obtains customers' perception of how well their needs and expectations are met, as one input to the customer satisfaction method in QMS-PRO-13. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Cyber Threat Notification and Information Sharing Procedure for DORA (Financial Entities)

Shares cyber threat information safely and notifies significant cyber threats when useful. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Cybersecurity RACI for NIST 800-171 / CMMC

Cybersecurity RACI. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Data and Data Governance Procedure for EU AI Act

Data and Data Governance Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Data Classification and Retention Policy for SOC 2

Data Classification and Retention Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Data for AI Systems Procedure for ISO/IEC 42001

Data for AI Systems Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Data Processing Agreement Template for EU GDPR

Data Processing Agreement Template. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Protection Awareness Deck for EU GDPR

Data Protection Awareness Deck. Editable PowerPoint deck aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Data Protection by Design and by Default Procedure for EU GDPR

Data Protection by Design and by Default Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Protection by Design for AI Procedure (incl. Pseudonymization) for GDPR for AI

Data Protection by Design for AI Procedure (incl. Pseudonymization). Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Data Protection Impact Assessment Procedure for EU GDPR

Data Protection Impact Assessment Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Protection Officer Procedure for EU GDPR

Data Protection Officer Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Protection Policy for EU GDPR

Data Protection Policy. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Protection Program Manual for EU GDPR

Data Protection Program Manual. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Protection RACI for EU GDPR

Data Protection RACI. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Retention and Deletion Policy for EU GDPR

Data Retention and Deletion Policy. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Retention, Deletion and Disposal Policy for ISO/IEC 27001:2022

Keeps information only as long as needed and disposes of it securely. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Data Subject Request Procedure for EU GDPR

Data Subject Request Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Subject Request Record (AI) for GDPR for AI

Data Subject Request Record (AI). Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Data Subject Request Record for EU GDPR

Data Subject Request Record. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Subject Request Response Letters for EU GDPR

Data Subject Request Response Letters. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Data Subject Rights for AI Procedure for GDPR for AI

Data Subject Rights for AI Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Data Subject Rights Policy for EU GDPR

Data Subject Rights Policy. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Decommissioning and Deactivation Procedure for NIST AI RMF

Decommissioning and Deactivation Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Decommissioning Checklist for NIST AI RMF

Decommissioning Checklist. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Deficiency and Corrective Action Record for SOC 2

Deficiency and Corrective Action Record. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Deployer Obligations Procedure for EU AI Act

Deployer Obligations Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Design and Development Procedure for ISO 9001:2026

Controls the design and development of products and services through planning, inputs, controls (reviews, verification, validation), outputs and changes. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Digital Operational Resilience Strategy for DORA (Financial Entities)

Sets how your organization keeps its ICT and business services resilient in support of its business strategy. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Digital Operational Resilience Testing Policy for DORA (Financial Entities)

Tests your preparedness for ICT-related incidents and fixes weaknesses quickly. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Direct Marketing Procedure for EU GDPR

Direct Marketing Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Documented Information Control Procedure for ISO/IEC 42001

Documented Information Control Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

DoD Cyber Incident Report Preparation Worksheet for NIST 800-171 / CMMC

DoD Cyber Incident Report Preparation Worksheet. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

DORA Add-On for ISO/IEC 27001:2022

Extends an existing ISO/IEC 27001 system to DORA (Regulation (EU) 2022/2554): a mapping guide plus 35 DORA policies, procedures, templates, forms and workbooks, including the register of information and incident reporting, with worked examples. Not legal advice.

DORA Awareness Quiz and Answer Key (Financial Entities)

Checks staff and management understanding after training. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

DORA Awareness Quiz and Answer Key (ICT Service Providers)

Checks team understanding after the briefing. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

DORA Contract Clause Checklist (ICT Service Providers)

Checks a client contract or addendum against DORA Article 30 and records your position on each term. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

DORA Gap Assessment and Implementation Plan (Financial Entities)

An Excel workbook with ready-made formulas, dropdowns and summaries for DORA Gap Assessment and Implementation Plan. Editable Excel file aligned with DORA (Financial Entities). Includes a completed worked example.

DORA Guide for Financial Entities

A practical guide to DORA (Financial Entities): what each requirement means, the evidence to keep, and a step-by-step implementation path. Editable Word file aligned with DORA (Financial Entities).

DORA Guide for ICT Service Providers

A practical guide to DORA (ICT Service Providers): what each requirement means, the evidence to keep, and a step-by-step implementation path. Editable Word file aligned with DORA (ICT Service Providers).

DORA Implementation Kit for Financial Entities — Complete

Everything you need to build and document your management system aligned with DORA (Financial Entities): a resilience strategy, 11 policies, 13 procedures, 9 templates, 12 forms and 3 Excel workbooks, including a register of information. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

DORA Implementation Kit for Financial Entities — Consultant

Everything you need to build and document your management system aligned with DORA (Financial Entities): a resilience strategy, 11 policies, 13 procedures, 9 templates, 12 forms and 3 Excel workbooks, including a register of information. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

DORA Implementation Kit for Financial Entities — Essentials

Everything you need to build and document your management system aligned with DORA (Financial Entities): a resilience strategy, 11 policies, 13 procedures, 9 templates, 12 forms and 3 Excel workbooks, including a register of information. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

DORA Implementation Kit for ICT Service Providers — Complete

Everything you need to build and document your management system aligned with DORA (ICT Service Providers): a client commitments policy, 6 procedures, 6 templates, 7 forms and a readiness workbook. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

DORA Implementation Kit for ICT Service Providers — Consultant

Everything you need to build and document your management system aligned with DORA (ICT Service Providers): a client commitments policy, 6 procedures, 6 templates, 7 forms and a readiness workbook. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

DORA Implementation Kit for ICT Service Providers — Essentials

Everything you need to build and document your management system aligned with DORA (ICT Service Providers): a client commitments policy, 6 procedures, 6 templates, 7 forms and a readiness workbook. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

DORA Supplier Readiness Workbook (ICT Service Providers)

An Excel workbook with ready-made formulas, dropdowns and summaries for DORA Supplier Readiness Workbook. Editable Excel file aligned with DORA (ICT Service Providers). Includes a completed worked example.

DORA Team Briefing Deck (ICT Service Providers)

Team briefing deck on what DORA means for your financial-sector clients and what your teams need to do. Editable PowerPoint file aligned with DORA (ICT Service Providers).

DPIA for AI Form (incl. Screening) for GDPR for AI

DPIA for AI Form (incl. Screening). Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

DPIA for AI Procedure for GDPR for AI

DPIA for AI Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

DPIA Form (incl. Screening) for EU GDPR

DPIA Form (incl. Screening). Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

DPO Designation Assessment for EU GDPR

DPO Designation Assessment. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

DR Test Report for SOC 2

DR Test Report. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Emergency Drill Record for ISO 14001:2026

Records emergency response tests and lessons learned. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Emergency Preparedness and Response Procedure for ISO 14001:2026

Prepares for and responds to potential emergency situations with environmental impact. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Emergency Response Pack for ISO 14001:2026

Includes 4 editable Word files from the full kit: Environmental Incident Report, Emergency Drill Record, Spill and Emergency Response Plan, Emergency Preparedness and Response Procedure.

Employee and Candidate Privacy Notice for EU GDPR

Employee and Candidate Privacy Notice. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Employee Data Protection Policy for EU GDPR

Employee Data Protection Policy. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

EMS Manual for ISO 14001:2026

This manual describes the environmental management system (EMS) of your organization, its scope and processes, and how it meets each requirement of ISO 14001:2026, clause by clause. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

EMS Registers Workbook for ISO 14001:2026

An Excel workbook with ready-made formulas, dropdowns and summaries for EMS Registers Workbook. Editable Excel file aligned with ISO 14001:2026. Includes a completed worked example.

EMS Roles and Responsibilities RACI for ISO 14001:2026

EMS roles, authorities and a RACI for every EMS activity, aligned with ISO 14001:2026 clause 5.3. Includes a worked example.

Encryption and Key Management Policy for SOC 2

Encryption and Key Management Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Endpoint and Malware Protection Policy for ISO/IEC 27001:2022

Protects laptops, mobile devices and servers against malware and misuse. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Environmental Aspects and Life Cycle Procedure for ISO 14001:2026

Identifies the environmental aspects and impacts of your activities, products and services across their life cycle, under normal, abnormal and emergency conditions, and determines which are significant. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Environmental Commitments Statement for ISO 14001:2026

Records the specific environmental commitments, beyond pollution prevention, that top management has made in response to your context and environmental conditions. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Environmental Incident Report for ISO 14001:2026

Records environmental incidents and near misses. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Environmental Objectives and Planning Procedure for ISO 14001:2026

Sets, plans, monitors and updates environmental objectives. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Environmental Policy and Objectives for ISO 14001:2026

States top management's commitments for protecting the environment and the environmental objectives of your organization. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Equipment Maintenance and Calibration Procedure for ISO 9001:2026

Planned maintenance and traceable calibration of measuring equipment (7.1.3, 7.1.5); others can mark it not applicable. Includes a worked example.

EU AI Act + ISO/IEC 42001 Bundle — Complete

Includes the EU AI Act and ISO/IEC 42001 kits in the Complete edition, so one AI management system can support the Act's obligations. Not legal advice.

EU AI Act Crosswalk for ISO/IEC 42001

ISO/IEC 42001 and EU AI Act Crosswalk. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

EU AI Act Practitioner Guide (as amended in 2026) for EU AI Act

EU AI Act Practitioner Guide (as amended in 2026). Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

EU Cyber Compliance Bundle — Complete

Includes the ISO/IEC 27001:2022 kit with the NIS2 and DORA add-ons in the Complete edition, plus a Bundle Guide that shows how to run them as one management system. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

EU Cyber Compliance Bundle — Consultant

Includes the ISO/IEC 27001:2022 kit with the NIS2 and DORA add-ons in the Consultant edition, plus a Bundle Guide that shows how to run them as one management system. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

EU Cyber Compliance Bundle — Essentials

Includes the ISO/IEC 27001:2022 kit with the NIS2 and DORA add-ons in the Essentials edition, plus a Bundle Guide that shows how to run them as one management system. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

EU Database Registration Data Sheet for EU AI Act

EU Database Registration Data Sheet. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

EU Declaration of Conformity Template for EU AI Act

EU Declaration of Conformity Template. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Evaluation of Compliance Report for ISO 14001:2026

Records the periodic evaluation of compliance with each obligation. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Evidence Matrix and Type 2 Evidence Calendar for SOC 2

Evidence Matrix and Type 2 Evidence Calendar. Editable Excel workbook aligned with the SOC 2 Trust Services Criteria.

Executive Briefing for ISO 14001:2026

A short briefing deck for top management on ISO 14001:2026: what it requires of leadership, what it means for the business, and the decisions needed. Editable PowerPoint file aligned with ISO 14001:2026.

Executive Briefing for ISO/IEC 27001:2022

A short briefing deck for top management on ISO/IEC 27001:2022: what it requires of leadership, what it means for the business, and the decisions needed. Editable PowerPoint file aligned with ISO/IEC 27001:2022.

Explanation Request Record for EU AI Act

Explanation Request Record. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Explanations and Complaints Procedure for EU AI Act

Explanations and Complaints Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

External Communication Procedure for SOC 2

External Communication Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

External Provider Control Procedure for ISO 9001:2026

Selects, evaluates, approves, monitors and re-evaluates external providers and communicates requirements so externally provided processes, products and services conform. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

External Service Provider Due Diligence for NIST 800-171 / CMMC

External Service Provider Due Diligence. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

External Service Providers and Cloud Procedure for NIST 800-171 / CMMC

External Service Providers and Cloud Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Feedback and Appeal Record for NIST AI RMF

Feedback and Appeal Record. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Financial Client Onboarding and Contract Review Procedure for DORA (ICT Service Providers)

Reviews and agrees DORA contract terms with financial-sector clients consistently and quickly. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Financial Sector Client Commitments Policy for DORA (ICT Service Providers)

Sets out how your organization supports its financial-sector clients in meeting their obligations under DORA. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Flaw Remediation and Malware Protection Procedure for NIST 800-171 / CMMC

Flaw Remediation and Malware Protection Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Forms and Templates Pack for EU AI Act

26 editable documents aligned with the EU AI Act (Regulation (EU) 2024/1689), with PDF copies of Word files and worked examples where available.

Forms and Templates Pack for EU GDPR

24 editable documents aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules, with PDF copies of Word files and worked examples where available.

Forms and Templates Pack for GDPR for AI

18 editable documents aligned with the GDPR as it applies to AI, with PDF copies of Word files and worked examples where available.

Forms and Templates Pack for ISO/IEC 42001

26 editable documents aligned with ISO/IEC 42001:2023, with PDF copies of Word files and worked examples where available.

Forms and Templates Pack for NIST 800-171 / CMMC

21 editable documents aligned with NIST SP 800-171 and CMMC Levels 1 and 2, with PDF copies of Word files and worked examples where available.

Forms and Templates Pack for NIST AI RMF

22 editable documents aligned with the NIST AI RMF 1.0, with PDF copies of Word files and worked examples where available.

Forms and Templates Pack for SOC 2

22 editable documents aligned with the SOC 2 Trust Services Criteria, with PDF copies of Word files and worked examples where available.

Forms and Templates Pack for SOC 2 + AI

8 editable documents aligned with SOC 2 with AI systems in scope, with PDF copies of Word files and worked examples where available.

Fundamental Rights and Data Protection Impact Assessment Procedure for EU AI Act

Fundamental Rights and Data Protection Impact Assessment Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Fundamental Rights Impact Assessment Form for EU AI Act

Fundamental Rights Impact Assessment Form. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Gap Assessment Workbook for DORA (Financial Entities)

Includes 1 editable Excel file from the full kit: DORA Gap Assessment and Implementation Plan. Worked examples included.

Gap Assessment Workbook for ISO/IEC 42001

Gap Assessment Workbook. Editable Excel workbook aligned with ISO/IEC 42001:2023.

GDPR and EU AI Act Crosswalk for GDPR for AI

GDPR and EU AI Act Crosswalk. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

GDPR Crosswalk to ISO/IEC 27001, EU AI Act and GDPR for AI for EU GDPR

GDPR Crosswalk to ISO/IEC 27001, EU AI Act and GDPR for AI. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

GDPR for AI Gap Assessment Workbook for GDPR for AI

GDPR for AI Gap Assessment Workbook. Editable Excel workbook aligned with the GDPR as it applies to AI.

GDPR for AI Practitioner Guide for GDPR for AI

GDPR for AI Practitioner Guide. Editable Word file aligned with the GDPR as it applies to AI.

GDPR Gap Assessment Workbook for EU GDPR

GDPR Gap Assessment Workbook. Editable Excel workbook aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

GDPR Practitioner Guide for EU GDPR

GDPR Practitioner Guide. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

General-Purpose AI Model Provider Procedure for EU AI Act

General-Purpose AI Model Provider Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Generative AI Profile Action Checklist (AI 600-1) for NIST AI RMF

Generative AI Profile Action Checklist (AI 600-1). Editable Excel workbook aligned with the NIST AI RMF 1.0.

Generative AI Use Standard for NIST AI RMF

Generative AI Use Standard. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Go/No-Go Deployment Decision for NIST AI RMF

Go/No-Go Deployment Decision. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Governance and Oversight Procedure for SOC 2

Governance and Oversight Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

GPAI Copyright Policy Template for EU AI Act

GPAI Copyright Policy Template. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

GPAI Model Documentation Guide for EU AI Act

GPAI Model Documentation Guide. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

GPAI Models with Systemic Risk Procedure for EU AI Act

GPAI Models with Systemic Risk Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Guided Setup Questionnaire (incl. Level 1 fast path) for NIST 800-171 / CMMC

Guided Setup Questionnaire (incl. Level 1 fast path). Editable Excel workbook aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Guided Setup Questionnaire (incl. SME fast path) for EU GDPR

Guided Setup Questionnaire (incl. SME fast path). Editable Excel workbook aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Guided Setup Questionnaire (incl. SME fast path) for GDPR for AI

Guided Setup Questionnaire (incl. SME fast path). Editable Excel workbook aligned with the GDPR as it applies to AI.

Guided Setup Questionnaire (incl. SME fast path) for NIST AI RMF

Guided Setup Questionnaire (incl. SME fast path). Editable Excel workbook aligned with the NIST AI RMF 1.0.

Guided Setup Questionnaire (incl. startup fast path) for SOC 2

Guided Setup Questionnaire (incl. startup fast path). Editable Excel workbook aligned with the SOC 2 Trust Services Criteria.

Guided Setup Questionnaire (role and risk path) for EU AI Act

Guided Setup Questionnaire (role and risk path). Editable Excel workbook aligned with the EU AI Act (Regulation (EU) 2024/1689).

Guided Setup Questionnaire for ISO/IEC 42001

Guided Setup Questionnaire. Editable Excel workbook aligned with ISO/IEC 42001:2023.

Guided Setup Questionnaire for SOC 2 + AI

Guided Setup Questionnaire. Editable Excel workbook aligned with SOC 2 with AI systems in scope.

Human Oversight and Intervention Log for ISO/IEC 42001

Human Oversight and Intervention Log. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Human Oversight and Override Log for EU AI Act

Human Oversight and Override Log. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Human Oversight and Override Log for NIST AI RMF

Human Oversight and Override Log. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Human Oversight Procedure for EU AI Act

Human Oversight Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Human Oversight Procedure for NIST AI RMF

Human Oversight Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Human Resources Security Policy for ISO/IEC 27001:2022

Makes sure people understand and fulfill their security responsibilities before, during and after employment. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

ICT Asset Management Policy for DORA (Financial Entities)

Identifies, classifies and manages every information and ICT asset that supports your business functions. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Business Continuity Policy for DORA (Financial Entities)

Keeps critical or important functions running and recovers them quickly after disruption. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Change Management Policy for DORA (Financial Entities)

Makes changes to ICT systems in a controlled way that protects resilience. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Change Request for DORA (Financial Entities)

Requests, assesses and approves an ICT change. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Concentration Risk Assessment for DORA (Financial Entities)

Assesses concentration risk before contracting for services that support critical or important functions. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Incident Management and Reporting Policy for DORA (Financial Entities)

Detects, manages, classifies, reports and learns from ICT-related incidents. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Incident Record for DORA (Financial Entities)

Records any ICT-related incident and its classification. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Provider Exit Plan for DORA (Financial Entities)

Exits an ICT provider that supports a critical or important function without disrupting services or breaching regulation. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Response and Recovery Plan for DORA (Financial Entities)

Response and recovery steps, recovery objectives and yearly test scenarios for critical or important functions, aligned with DORA Article 11. Includes a worked example.

ICT Risk Acceptance Form for DORA (Financial Entities)

Records the acceptance of a residual ICT risk above the normal limit. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Risk Assessment Procedure for DORA (Financial Entities)

Identifies and assesses ICT risks in a consistent, repeatable way. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Risk Framework Review and Internal Audit Procedure for DORA (Financial Entities)

Reviews the ICT risk management framework yearly and audits it independently. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Risk Management Framework Review Report for DORA (Financial Entities)

Documents the yearly review of the ICT risk management framework for the management body and, on request, the competent authority. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Risk Management Policy for DORA (Financial Entities)

Sets how your organization identifies, assesses, treats, monitors and reports ICT risk. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Risk, Incident and Testing Registers for DORA (Financial Entities)

An Excel workbook with ready-made formulas, dropdowns and summaries for ICT Risk, Incident and Testing Registers. Editable Excel file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Third-Party Due Diligence and Contracting Procedure for DORA (Financial Entities)

Assesses ICT providers before contracting and agrees contracts that meet DORA. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Third-Party Due Diligence Questionnaire for DORA (Financial Entities)

Collects information from an ICT provider before contracting. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Third-Party Monitoring and Exit Procedure for DORA (Financial Entities)

Monitors ICT providers during the contract and exits without disruption when needed. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

ICT Third-Party Risk and Article 30 Pack for DORA (Financial Entities)

Includes 8 editable Word files from the full kit: ICT Third-Party Due Diligence Questionnaire, ICT Third-Party Risk Policy, ICT Third-Party Due Diligence and Contracting Procedure, ICT Third-Party Monitoring and Exit Procedure and 4 more. Worked examples included.

ICT Third-Party Risk Policy for DORA (Financial Entities)

Manages ICT third-party risk across the full lifecycle of contractual arrangements, in particular those supporting critical or important functions. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Identification and Authentication Policy for NIST 800-171 / CMMC

Identification and Authentication Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Identity Verification Checklist for EU GDPR

Identity Verification Checklist. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Identity, MFA and Password Procedure for NIST 800-171 / CMMC

Identity, MFA and Password Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Implementation & Transition Kit for ISO 14001:2026 — Complete

Everything you need to build and document your management system aligned with ISO 14001:2026: an EMS Manual, 2 policies, 18 procedures, 4 templates, 15 forms and 2 Excel workbooks. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

Implementation & Transition Kit for ISO 14001:2026 — Consultant

Everything you need to build and document your management system aligned with ISO 14001:2026: an EMS Manual, 2 policies, 18 procedures, 4 templates, 15 forms and 2 Excel workbooks. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

Implementation & Transition Kit for ISO 14001:2026 — Essentials

Everything you need to build and document your management system aligned with ISO 14001:2026: an EMS Manual, 2 policies, 18 procedures, 4 templates, 15 forms and 2 Excel workbooks. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

Implementation & Transition Kit for ISO 9001:2026 — Complete

Everything you need to build and document your management system aligned with ISO 9001:2026: a Quality Manual, 2 policies, 16 procedures, 2 templates, 10 forms and 2 Excel workbooks. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

Implementation & Transition Kit for ISO 9001:2026 — Consultant

Everything you need to build and document your management system aligned with ISO 9001:2026: a Quality Manual, 2 policies, 16 procedures, 2 templates, 10 forms and 2 Excel workbooks. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

Implementation & Transition Kit for ISO 9001:2026 — Essentials

Everything you need to build and document your management system aligned with ISO 9001:2026: a Quality Manual, 2 policies, 16 procedures, 2 templates, 10 forms and 2 Excel workbooks. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

Implementation and Transition Workbook for ISO 14001:2026

Includes 1 editable Excel file from the full kit: Transition and Implementation Workbook.

Implementation Kit for GDPR for AI — Complete

Documents aligned with GDPR for AI: a program manual, 2 policies, 14 procedures, 5 templates, 13 forms, 3 workbooks, 1 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides. Not legal advice.

Implementation Kit for GDPR for AI — Consultant

Documents aligned with GDPR for AI: a program manual, 2 policies, 14 procedures, 5 templates, 13 forms, 3 workbooks, 1 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Consultant edition adds everything in Complete plus a consultant toolkit (engagement letter, project plan and fee calculator, pricing guide, kickoff slides) and the Consultant License. Not legal advice.

Implementation Kit for GDPR for AI — Essentials

Documents aligned with GDPR for AI: a program manual, 2 policies, 12 procedures, 4 templates, 10 forms and 3 workbooks, with a Kit Navigator, PDF copies and SHA-256 checksums. Not legal advice.

Implementation Kit for ISO/IEC 27001:2022 — Complete

Everything you need to build and document your management system aligned with ISO/IEC 27001:2022: an ISMS Manual, 25 policies, 16 procedures, 7 templates, 18 forms and 3 Excel workbooks, including a 93-control Statement of Applicability. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

Implementation Kit for ISO/IEC 27001:2022 — Consultant

Everything you need to build and document your management system aligned with ISO/IEC 27001:2022: an ISMS Manual, 25 policies, 16 procedures, 7 templates, 18 forms and 3 Excel workbooks, including a 93-control Statement of Applicability. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

Implementation Kit for ISO/IEC 27001:2022 — Essentials

Everything you need to build and document your management system aligned with ISO/IEC 27001:2022: an ISMS Manual, 25 policies, 16 procedures, 7 templates, 18 forms and 3 Excel workbooks, including a 93-control Statement of Applicability. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

Implementation Kit for ISO/IEC 42001:2023 — Complete

Documents aligned with ISO/IEC 42001:2023: a program manual, 3 policies, 18 procedures, 10 templates, 16 forms, 3 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides. Not legal advice.

Implementation Kit for ISO/IEC 42001:2023 — Consultant

Documents aligned with ISO/IEC 42001:2023: a program manual, 3 policies, 18 procedures, 10 templates, 16 forms, 3 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Consultant edition adds everything in Complete plus a consultant toolkit (engagement letter, project plan and fee calculator, pricing guide, kickoff slides) and the Consultant License. Not legal advice.

Implementation Kit for ISO/IEC 42001:2023 — Essentials

Documents aligned with ISO/IEC 42001:2023: a program manual, 3 policies, 18 procedures, 9 templates, 15 forms and 3 workbooks, with a Kit Navigator, PDF copies and SHA-256 checksums. Not legal advice.

Implementation Kit for NIST AI RMF 1.0 — Complete

Documents aligned with NIST AI RMF 1.0: a program manual, 3 policies, 17 procedures, 9 templates, 13 forms, 4 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides. Not legal advice.

Implementation Kit for NIST AI RMF 1.0 — Consultant

Documents aligned with NIST AI RMF 1.0: a program manual, 3 policies, 17 procedures, 9 templates, 13 forms, 4 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Consultant edition adds everything in Complete plus a consultant toolkit (engagement letter, project plan and fee calculator, pricing guide, kickoff slides) and the Consultant License. Not legal advice.

Implementation Kit for NIST AI RMF 1.0 — Essentials

Documents aligned with NIST AI RMF 1.0: a program manual, 3 policies, 16 procedures, 8 templates, 11 forms and 4 workbooks, with a Kit Navigator, PDF copies and SHA-256 checksums. Not legal advice.

Implementation Kit for the EU AI Act — Complete

Documents aligned with the EU AI Act: a program manual, 5 policies, 24 procedures, 11 templates, 15 forms, 4 workbooks, 1 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides. Not legal advice.

Implementation Kit for the EU AI Act — Consultant

Documents aligned with the EU AI Act: a program manual, 5 policies, 24 procedures, 11 templates, 15 forms, 4 workbooks, 1 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Consultant edition adds everything in Complete plus a consultant toolkit (engagement letter, project plan and fee calculator, pricing guide, kickoff slides) and the Consultant License. Not legal advice.

Implementation Kit for the EU AI Act — Essentials

Documents aligned with the EU AI Act: a program manual, 5 policies, 22 procedures, 8 templates, 14 forms and 4 workbooks, with a Kit Navigator, PDF copies and SHA-256 checksums. Not legal advice.

Implementation Kit for the EU GDPR — Complete

Documents aligned with the EU GDPR: a program manual, 8 policies, 21 procedures, 10 templates, 14 forms, 3 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides. Not legal advice.

Implementation Kit for the EU GDPR — Consultant

Documents aligned with the EU GDPR: a program manual, 8 policies, 21 procedures, 10 templates, 14 forms, 3 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Consultant edition adds everything in Complete plus a consultant toolkit (engagement letter, project plan and fee calculator, pricing guide, kickoff slides) and the Consultant License. Not legal advice.

Implementation Kit for the EU GDPR — Essentials

Documents aligned with the EU GDPR: a program manual, 7 policies, 18 procedures, 6 templates, 11 forms and 3 workbooks, with a Kit Navigator, PDF copies and SHA-256 checksums. Not legal advice.

Implementation Plan and Gap Assessment Workbook for ISO/IEC 27001:2022

An Excel workbook with ready-made formulas, dropdowns and summaries for Implementation Plan and Gap Assessment Workbook. Editable Excel file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Incident Classification and Major Incident Reporting Procedure for DORA (Financial Entities)

Classifies ICT-related incidents consistently and submits major incident reports on time. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Incident Classification and Reporting Pack for DORA (Financial Entities)

Includes 10 editable Excel and Word files from the full kit: ICT Incident Record, Post-Incident Review Report, Client Notification of Major Incident, Significant Cyber Threat Notification and 6 more. Worked examples included.

Incident Management Policy for ISO/IEC 27001:2022

Detects, reports, assesses, responds to and learns from information security events and incidents. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Incident Management Procedure for ISO/IEC 27001:2022

Detects, reports, assesses, responds to, notifies and learns from information security incidents. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Incident Record for NIST 800-171 / CMMC

Incident Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Incident Report for SOC 2

Incident Report. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Incident Response and DoD Reporting Procedure for NIST 800-171 / CMMC

Incident Response and DoD Reporting Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Incident Response Pack for ISO/IEC 27001:2022

Includes 5 editable Word files from the full kit: Information Security Incident Report, Tabletop Exercise Record, Incident Management Policy, Incident Management Procedure and 1 more.

Incident Response Playbooks for ISO/IEC 27001:2022

Gives the response team step-by-step actions for the most likely incident types. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Incident Response Policy for NIST 800-171 / CMMC

Incident Response Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Incident Response Policy for SOC 2

Incident Response Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Incident Response Procedure for SOC 2

Incident Response Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Independent Review Checklist (72 subcategories) for NIST AI RMF

Independent Review Checklist (72 subcategories). Editable Excel workbook aligned with the NIST AI RMF 1.0.

Industry Annex: AI Agent Platforms for SOC 2 + AI

Industry Annex: AI Agent Platforms. Editable Word file aligned with SOC 2 with AI systems in scope.

Industry Annex: AI SaaS and AIaaS Providers for SOC 2 + AI

Industry Annex: AI SaaS and AIaaS Providers. Editable Word file aligned with SOC 2 with AI systems in scope.

Industry Annex: Construction and Engineering for ISO 14001:2026

Shows how to apply the Implementation & Transition Kit for ISO 14001:2026 in construction and engineering — typical aspects, conditions, obligations, emergencies and opportunities. Editable Word file aligned with ISO 14001:2026.

Industry Annex: Construction and Engineering for ISO 9001:2026

This annex shows how to apply the Implementation & Transition Kit for ISO 9001:2026 in construction and engineering — typical processes, KPIs, risks, opportunities and what auditors focus on — with example entries you can adapt. It applies to contractors, subcontractors, engineering firms, installation and infrastructure projects. Editable Word file aligned with ISO 9001:2026.

Industry Annex: Crypto-Asset Service Providers for DORA (Financial Entities)

Sector guidance for Crypto-Asset Service Providers: typical issues, examples and which kit documents to adapt first. Editable Word file aligned with DORA (Financial Entities).

Industry Annex: Customer Support Outsourcing with AI for SOC 2 + AI

Industry Annex: Customer Support Outsourcing with AI. Editable Word file aligned with SOC 2 with AI systems in scope.

Industry Annex: Data and Analytics Providers for SOC 2

Industry Annex: Data and Analytics Providers. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Industry Annex: E-commerce and Retail for EU GDPR

Industry Annex: E-commerce and Retail. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Industry Annex: Education and Training for EU AI Act

Industry Annex: Education and Training. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

Industry Annex: Employment and HR for EU AI Act

Industry Annex: Employment and HR. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

Industry Annex: Employment and HR for NIST AI RMF

Industry Annex: Employment and HR. Editable Word file aligned with the NIST AI RMF 1.0.

Industry Annex: Engineering and Design Firms for NIST 800-171 / CMMC

Industry Annex: Engineering and Design Firms. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Industry Annex: Financial Services and Insurance for EU AI Act

Industry Annex: Financial Services and Insurance. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

Industry Annex: Financial Services for EU GDPR

Industry Annex: Financial Services. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Industry Annex: Financial Services for GDPR for AI

Industry Annex: Financial Services. Editable Word file aligned with the GDPR as it applies to AI.

Industry Annex: Financial Services for ISO/IEC 42001

Industry Annex: Financial Services. Editable Word file aligned with ISO/IEC 42001:2023.

Industry Annex: Financial Services for NIST AI RMF

Industry Annex: Financial Services. Editable Word file aligned with the NIST AI RMF 1.0.

Industry Annex: Fintech and Payments for SOC 2

Industry Annex: Fintech and Payments. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Industry Annex: Fintech Using AI for SOC 2 + AI

Industry Annex: Fintech Using AI. Editable Word file aligned with SOC 2 with AI systems in scope.

Industry Annex: Food and Beverage for ISO 14001:2026

Shows how to apply the Implementation & Transition Kit for ISO 14001:2026 in food and beverage — typical aspects, conditions, obligations, emergencies and opportunities. Editable Word file aligned with ISO 14001:2026.

Industry Annex: Healthcare and Life Sciences for ISO/IEC 42001

Industry Annex: Healthcare and Life Sciences. Editable Word file aligned with ISO/IEC 42001:2023.

Industry Annex: Healthcare and Medical Devices for EU AI Act

Industry Annex: Healthcare and Medical Devices. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

Industry Annex: Healthcare for EU GDPR

Industry Annex: Healthcare. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Industry Annex: Healthcare for GDPR for AI

Industry Annex: Healthcare. Editable Word file aligned with the GDPR as it applies to AI.

Industry Annex: Healthcare for NIST AI RMF

Industry Annex: Healthcare. Editable Word file aligned with the NIST AI RMF 1.0.

Industry Annex: Healthtech for SOC 2

Industry Annex: Healthtech. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Industry Annex: Healthtech Using AI for SOC 2 + AI

Industry Annex: Healthtech Using AI. Editable Word file aligned with SOC 2 with AI systems in scope.

Industry Annex: HR and Employment for EU GDPR

Industry Annex: HR and Employment. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Industry Annex: HR and Recruitment for GDPR for AI

Industry Annex: HR and Recruitment. Editable Word file aligned with the GDPR as it applies to AI.

Industry Annex: Insurers and Intermediaries for DORA (Financial Entities)

Sector guidance for Insurers and Intermediaries: typical issues, examples and which kit documents to adapt first. Editable Word file aligned with DORA (Financial Entities).

Industry Annex: Investment Firms for DORA (Financial Entities)

Sector guidance for Investment Firms: typical issues, examples and which kit documents to adapt first. Editable Word file aligned with DORA (Financial Entities).

Industry Annex: Logistics and Warehousing for ISO 14001:2026

Shows how to apply the Implementation & Transition Kit for ISO 14001:2026 in logistics and warehousing — typical aspects, conditions, obligations, emergencies and opportunities. Editable Word file aligned with ISO 14001:2026.

Industry Annex: Managed Service and Outsourcing Providers for DORA (ICT Service Providers)

Sector guidance for Managed Service and Outsourcing Providers: typical issues, examples and which kit documents to adapt first. Editable Word file aligned with DORA (ICT Service Providers).

Industry Annex: Managed Services and IT Providers for SOC 2

Industry Annex: Managed Services and IT Providers. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Industry Annex: Manufacturing and Industrial for ISO/IEC 27001:2022

Shows how to apply ISO/IEC 27001:2022 in manufacturing and industrial — typical risks, the controls that matter most, and what auditors focus on. Editable Word file aligned with ISO/IEC 27001:2022.

Industry Annex: Manufacturing and Industrial for ISO/IEC 42001

Industry Annex: Manufacturing and Industrial. Editable Word file aligned with ISO/IEC 42001:2023.

Industry Annex: Manufacturing and Machine Shops for NIST 800-171 / CMMC

Industry Annex: Manufacturing and Machine Shops. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Industry Annex: Manufacturing for ISO 14001:2026

Shows how to apply the Implementation & Transition Kit for ISO 14001:2026 in manufacturing — typical aspects, conditions, obligations, emergencies and opportunities. Editable Word file aligned with ISO 14001:2026.

Industry Annex: Manufacturing for ISO 9001:2026

This annex shows how to apply the Implementation & Transition Kit for ISO 9001:2026 in manufacturing — typical processes, KPIs, risks, opportunities and what auditors focus on — with example entries you can adapt. It applies to discrete and process manufacturers, machining, assembly, plastics, metal, packaging and food-contact producers. Editable Word file aligned with ISO 9001:2026.

Industry Annex: Marketing and Customer Analytics for GDPR for AI

Industry Annex: Marketing and Customer Analytics. Editable Word file aligned with the GDPR as it applies to AI.

Industry Annex: MedTech-Adjacent and Life Sciences Suppliers for ISO 9001:2026

This annex shows how to apply the Implementation & Transition Kit for ISO 9001:2026 in MedTech-adjacent and life sciences suppliers — typical processes, KPIs, risks, opportunities and what auditors focus on — with example entries you can adapt. It applies to component suppliers, contract manufacturers, packaging, labs and service providers supplying medical device or pharma companies (ISO 9001 base, often with ISO 13485 customers). Editable Word file aligned with ISO 9001:2026.

Industry Annex: Offices and Professional Services for ISO 14001:2026

Shows how to apply the Implementation & Transition Kit for ISO 14001:2026 in offices and professional services — typical aspects, conditions, obligations, emergencies and opportunities. Editable Word file aligned with ISO 14001:2026.

Industry Annex: Payment and E-Money Institutions for DORA (Financial Entities)

Sector guidance for Payment and E-Money Institutions: typical issues, examples and which kit documents to adapt first. Editable Word file aligned with DORA (Financial Entities).

Industry Annex: Professional Services for ISO/IEC 27001:2022

Shows how to apply ISO/IEC 27001:2022 in professional services — typical risks, the controls that matter most, and what auditors focus on. Editable Word file aligned with ISO/IEC 27001:2022.

Industry Annex: Public Sector and Government Contractors for NIST AI RMF

Industry Annex: Public Sector and Government Contractors. Editable Word file aligned with the NIST AI RMF 1.0.

Industry Annex: Public Sector and Professional Services for ISO/IEC 42001

Industry Annex: Public Sector and Professional Services. Editable Word file aligned with ISO/IEC 42001:2023.

Industry Annex: SaaS and Cloud Providers for DORA (ICT Service Providers)

Sector guidance for SaaS and Cloud Providers: typical issues, examples and which kit documents to adapt first. Editable Word file aligned with DORA (ICT Service Providers).

Industry Annex: SaaS and Cloud Services for SOC 2

Industry Annex: SaaS and Cloud Services. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Industry Annex: SaaS and IT Services for ISO/IEC 27001:2022

Shows how to apply ISO/IEC 27001:2022 in SaaS and IT services — typical risks, the controls that matter most, and what auditors focus on. Editable Word file aligned with ISO/IEC 27001:2022.

Industry Annex: SaaS and Technology for EU GDPR

Industry Annex: SaaS and Technology. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Industry Annex: Services and Professional Services for ISO 9001:2026

This annex shows how to apply the Implementation & Transition Kit for ISO 9001:2026 in services and professional services — typical processes, KPIs, risks, opportunities and what auditors focus on — with example entries you can adapt. It applies to consulting, engineering services, logistics, facility services, training providers, call centers and agencies. Editable Word file aligned with ISO 9001:2026.

Industry Annex: Small Businesses Using an MSP for NIST 800-171 / CMMC

Industry Annex: Small Businesses Using an MSP. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Industry Annex: Software and IT for ISO 9001:2026

This annex shows how to apply the Implementation & Transition Kit for ISO 9001:2026 in software and IT — typical processes, KPIs, risks, opportunities and what auditors focus on — with example entries you can adapt. It applies to software product companies, SaaS, IT service providers, managed services and system integrators. Editable Word file aligned with ISO 9001:2026.

Industry Annex: Software and IT Services for NIST 800-171 / CMMC

Industry Annex: Software and IT Services. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Industry Annex: Software and SaaS for GDPR for AI

Industry Annex: Software and SaaS. Editable Word file aligned with the GDPR as it applies to AI.

Industry Annex: Software and SaaS for ISO/IEC 42001

Industry Annex: Software and SaaS. Editable Word file aligned with ISO/IEC 42001:2023.

Industry Annex: Software and SaaS for NIST AI RMF

Industry Annex: Software and SaaS. Editable Word file aligned with the NIST AI RMF 1.0.

Industry Annex: Software and SaaS Providers for EU AI Act

Industry Annex: Software and SaaS Providers. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

Industry Annex: Software Vendors and Fintech Platforms for DORA (ICT Service Providers)

Sector guidance for Software Vendors and Fintech Platforms: typical issues, examples and which kit documents to adapt first. Editable Word file aligned with DORA (ICT Service Providers).

Industry Annex: Universities and Research for NIST 800-171 / CMMC

Industry Annex: Universities and Research. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Industry Annexes Pack for EU AI Act

5 editable documents aligned with the EU AI Act (Regulation (EU) 2024/1689), with PDF copies of Word files and worked examples where available.

Industry Annexes Pack for EU GDPR

5 editable documents aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules, with PDF copies of Word files and worked examples where available.

Industry Annexes Pack for GDPR for AI

5 editable documents aligned with the GDPR as it applies to AI, with PDF copies of Word files and worked examples where available.

Industry Annexes Pack for ISO/IEC 42001

5 editable documents aligned with ISO/IEC 42001:2023, with PDF copies of Word files and worked examples where available.

Industry Annexes Pack for NIST 800-171 / CMMC

5 editable documents aligned with NIST SP 800-171 and CMMC Levels 1 and 2, with PDF copies of Word files and worked examples where available.

Industry Annexes Pack for NIST AI RMF

5 editable documents aligned with the NIST AI RMF 1.0, with PDF copies of Word files and worked examples where available.

Industry Annexes Pack for SOC 2

5 editable documents aligned with the SOC 2 Trust Services Criteria, with PDF copies of Word files and worked examples where available.

Industry Annexes Pack for SOC 2 + AI

5 editable documents aligned with SOC 2 with AI systems in scope, with PDF copies of Word files and worked examples where available.

Information for Interested Parties and Incident Communication Procedure for ISO/IEC 42001

Information for Interested Parties and Incident Communication Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Information for Users Template for ISO/IEC 42001

Information for Users Template. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Information Security Incident Report for ISO/IEC 27001:2022

Records an incident from detection to closure. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Information Security Policy for DORA (Financial Entities)

Protects the availability, authenticity, integrity and confidentiality of data, information assets and ICT assets. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Information Security Policy for ISO/IEC 27001:2022

Sets out top management's direction and commitment for information security at your organization and the framework for objectives and topic policies. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Information Security Policy for NIST 800-171 / CMMC

Information Security Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Information Security Policy for Personal Data for EU GDPR

Information Security Policy for Personal Data. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Information Security Policy for SOC 2

Information Security Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Information Security Program Manual for SOC 2

Information Security Program Manual. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Information Security Risk Assessment and Treatment Procedure for ISO/IEC 27001:2022

Defines how information security risks are identified, analyzed, evaluated and treated in a consistent and repeatable way. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Information Transfer Policy for ISO/IEC 27001:2022

Protects information transferred inside the organization and with external parties. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Instructions for Use Template for EU AI Act

Instructions for Use Template. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Integrated Management System Kit for ISO 9001, ISO 14001 and ISO/IEC 27001 — Complete

Everything you need to build and document your management system aligned with ISO 9001:2026, ISO 14001:2026 and ISO/IEC 27001:2022: one integrated manual and policy, 11 shared procedures, integrated workbooks and the standard-specific documents for all three standards. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

Integrated Management System Kit for ISO 9001, ISO 14001 and ISO/IEC 27001 — Consultant

Everything you need to build and document your management system aligned with ISO 9001:2026, ISO 14001:2026 and ISO/IEC 27001:2022: one integrated manual and policy, 11 shared procedures, integrated workbooks and the standard-specific documents for all three standards. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

Integrated Management System Kit for ISO 9001, ISO 14001 and ISO/IEC 27001 — Essentials

Everything you need to build and document your management system aligned with ISO 9001:2026, ISO 14001:2026 and ISO/IEC 27001:2022: one integrated manual and policy, 11 shared procedures, integrated workbooks and the standard-specific documents for all three standards. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

Integration Map for ISO 9001 and ISO 14001

Shows where an ISO 9001:2026 quality management system and an ISO 14001:2026 EMS can share processes and documents. Editable Word file aligned with ISO 14001:2026.

Integration Map for ISO 9001 and ISO 27001

Shows where an existing ISO 9001 QMS and the ISMS can share processes and documents. Editable Word file aligned with ISO/IEC 27001:2022.

Internal Audit Checklist (Clauses and Annex A) for ISO/IEC 42001

Internal Audit Checklist (Clauses and Annex A). Editable Excel workbook aligned with ISO/IEC 42001:2023.

Internal Audit Checklist by Article for EU AI Act

Internal Audit Checklist by Article. Editable Excel workbook aligned with the EU AI Act (Regulation (EU) 2024/1689).

Internal Audit Pack for ISO 14001:2026

Includes 6 editable Excel and Word files from the full kit: Evaluation of Compliance Report, Internal Audit Plan and Report, Nonconformity and Corrective Action Report, Transition and Certification Readiness Checklist and 2 more.

Internal Audit Pack for ISO 9001:2026

Includes 4 editable Excel and Word files from the full kit: Internal Audit Plan and Report, Transition Audit Readiness Checklist, Internal Audit Procedure, QMS Records Workbook.

Internal Audit Pack for ISO/IEC 27001:2022

Includes 6 editable Excel and Word files from the full kit: Internal Audit Plan and Report, Nonconformity and Corrective Action Report, Certification Readiness Checklist, Internal Audit Procedure and 2 more.

Internal Audit Plan and Report for ISO 14001:2026

Plans each internal audit with objectives, criteria and scope, and reports results. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Internal Audit Plan and Report for ISO 9001:2026

Plans and records an internal audit, including the defined objectives now required for each audit by ISO 9001:2026 (9.2.2), and reports findings for correction. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Internal Audit Plan and Report for ISO/IEC 27001:2022

Plans an internal audit with criteria and scope, and reports findings. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Internal Audit Procedure for ISO 14001:2026

Plans and carries out internal audits of the EMS. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Internal Audit Procedure for ISO 9001:2026

Plans and conducts internal audits that determine whether the QMS conforms to ISO 9001:2026 and your own requirements and is effectively implemented and maintained. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Internal Audit Procedure for ISO/IEC 27001:2022

Plans and performs internal audits that check the ISMS conforms and is effectively implemented. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Internal Audit Procedure for ISO/IEC 42001

Internal Audit Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Internal Audit Program and Plan for ISO/IEC 42001

Internal Audit Program and Plan. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Internal Audit Report for EU AI Act

Internal Audit Report. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Internal Audit Report for ISO/IEC 42001

Internal Audit Report. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

International Data Transfer Policy for EU GDPR

International Data Transfer Policy. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

International Transfers and Transfer Impact Assessment Procedure for EU GDPR

International Transfers and Transfer Impact Assessment Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

ISMS Manual for ISO/IEC 27001:2022

This manual describes the information security management system (ISMS) of your organization, its scope and processes, and how it meets each requirement of ISO/IEC 27001:2022, clause by clause. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

ISMS Registers and Audit Workbook for ISO/IEC 27001:2022

An Excel workbook with ready-made formulas, dropdowns and summaries for ISMS Registers and Audit Workbook. Editable Excel file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

ISMS Roles and Responsibilities RACI for ISO/IEC 27001:2022

Assigns and communicates ISMS roles, responsibilities and authorities. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

ISMS Scope Statement for ISO/IEC 27001:2022

Defines and documents the boundaries and applicability of the ISMS. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Joiner, Mover and Leaver Checklist for ISO/IEC 27001:2022

Makes sure access and assets are handled when people join, move or leave. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Joint Controller Arrangement Template for EU GDPR

Joint Controller Arrangement Template. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Leadership Briefing Deck for NIST 800-171 / CMMC

Leadership Briefing Deck. Editable PowerPoint deck aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Leadership Roles and Quality Culture Procedure for ISO 9001:2026

Defines how top management demonstrates leadership and commitment, promotes and demonstrates a quality culture and ethical behavior, communicates the policy, and assigns roles, responsibilities and authorities, including QMS integrity during change. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Legal and Regulatory Requirements Procedure for NIST AI RMF

Legal and Regulatory Requirements Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Legal Basis Record for EU GDPR

Legal Basis Record. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Legal Basis Record for GDPR for AI

Legal Basis Record. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Legal, Regulatory and Contractual Requirements Procedure for ISO/IEC 27001:2022

Identifies, tracks and meets legal, regulatory and contractual information security requirements. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Legal, Regulatory and Intellectual Property Compliance Policy for ISO/IEC 27001:2022

Identifies and meets legal, statutory, regulatory and contractual requirements related to information security. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Legitimate Interest Assessment (LIA) for EU GDPR

Legitimate Interest Assessment (LIA). Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Legitimate Interest Assessment (LIA) for GDPR for AI

Legitimate Interest Assessment (LIA). Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Legitimate Interest Assessment Procedure for EU GDPR

Legitimate Interest Assessment Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Legitimate Interest Assessment Procedure for GDPR for AI

Legitimate Interest Assessment Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Level 1 Self-Assessment Checklist for NIST 800-171 / CMMC

Level 1 Self-Assessment Checklist. Editable Excel workbook aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Life Cycle Perspective Worksheet for ISO 14001:2026

Applies a life cycle perspective to your products and services: identify aspects at each stage and whether you control or influence them. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Logging and Monitoring Policy for ISO/IEC 27001:2022

Records and monitors activity so that security events can be detected and investigated. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Logging and Monitoring Procedure for SOC 2

Logging and Monitoring Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Logging and Record-Keeping Procedure for EU AI Act

Logging and Record-Keeping Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Maintenance Policy for NIST 800-171 / CMMC

Maintenance Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Maintenance Record for NIST 800-171 / CMMC

Maintenance Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Major Incident Report Data Sheet for DORA (Financial Entities)

Collects the information needed for initial, intermediate and final reports on a major ICT-related incident. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Management Assertion Example for SOC 2

Management Assertion Example. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Management Body DORA Briefing Deck (Financial Entities)

Briefing deck for the management body on its DORA duties, ICT risk oversight and the decisions needed. Editable PowerPoint file aligned with DORA (Financial Entities).

Management Body ICT Risk Report for DORA (Financial Entities)

Gives the management body a clear, regular view of ICT risk and resilience. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Management Body Oversight and Training Procedure for DORA (Financial Entities)

Makes sure the management body governs ICT risk actively and keeps its knowledge current. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Management Body Pack for DORA (Financial Entities)

Includes 4 editable PowerPoint and Word files from the full kit: Management Body Training Record, Management Body Oversight and Training Procedure, Management Body ICT Risk Report, Management Body DORA Briefing Deck. Worked examples included.

Management Body Training Record for DORA (Financial Entities)

Records ICT risk training of management body members. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Management Briefing Deck for EU AI Act

Management Briefing Deck. Editable PowerPoint deck aligned with the EU AI Act (Regulation (EU) 2024/1689).

Management Briefing Deck for EU GDPR

Management Briefing Deck. Editable PowerPoint deck aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Management Briefing Deck for GDPR for AI

Management Briefing Deck. Editable PowerPoint deck aligned with the GDPR as it applies to AI.

Management Briefing Deck for ISO/IEC 42001

Management Briefing Deck. Editable PowerPoint deck aligned with ISO/IEC 42001:2023.

Management Briefing Deck for NIST AI RMF

Management Briefing Deck. Editable PowerPoint deck aligned with the NIST AI RMF 1.0.

Management Briefing Deck for SOC 2

Management Briefing Deck. Editable PowerPoint deck aligned with the SOC 2 Trust Services Criteria.

Management Briefing Deck for SOC 2 + AI

Management Briefing Deck. Editable PowerPoint deck aligned with SOC 2 with AI systems in scope.

Management Commitment Letter for ISO 14001:2026

Communicates top management's commitment to the EMS to all employees. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Management Commitment Letter for ISO/IEC 27001:2022

Records top management's commitment to the ISMS project. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Management Review Agenda and Minutes for ISO 14001:2026

Records management review inputs, conclusions and decisions. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Management Review Agenda and Minutes for ISO 9001:2026

Records management review of the QMS's suitability, adequacy, effectiveness and alignment with strategic direction, using ISO 9001:2026 inputs. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Management Review Agenda and Minutes for ISO/IEC 27001:2022

Records management review inputs, discussion and decisions. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Management Review Minutes for EU AI Act

Management Review Minutes. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Management Review Minutes for ISO/IEC 42001

Management Review Minutes. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Management Review Minutes for SOC 2

Management Review Minutes. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Management Review Procedure for ISO 14001:2026

Reviews the EMS at planned intervals for continuing suitability, adequacy and effectiveness. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Management Review Procedure for ISO 9001:2026

Ensures top management reviews the QMS at planned intervals for continuing suitability, adequacy, effectiveness and alignment with strategic direction, and records decisions and actions. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Management Review Procedure for ISO/IEC 27001:2022

Makes sure top management reviews the ISMS and makes decisions on improvement and changes. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Management Review Procedure for ISO/IEC 42001

Management Review Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Material Change Notification for DORA (ICT Service Providers)

Notifies financial clients in advance of material changes (locations, subcontractors, service). Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Maturity Gap Assessment Workbook (72 subcategories) for NIST AI RMF

Maturity Gap Assessment Workbook (72 subcategories). Editable Excel workbook aligned with the NIST AI RMF 1.0.

Media Protection and Sanitization Procedure for NIST 800-171 / CMMC

Media Protection and Sanitization Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Media Protection Policy for NIST 800-171 / CMMC

Media Protection Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Media Sanitization Record for NIST 800-171 / CMMC

Media Sanitization Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Model Anonymity Assessment Form for GDPR for AI

Model Anonymity Assessment Form. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Model Card Template for NIST AI RMF

Model Card Template. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Model DORA Contract Addendum (ICT Service Providers)

Offers financial clients a ready DORA addendum that reflects Article 30. Editable Word file aligned with DORA (ICT Service Providers).

Monitoring, Measurement and Customer Satisfaction Procedure for ISO 9001:2026

Defines what is monitored and measured, how customer satisfaction is obtained and analyzed, and how data is evaluated to drive decisions and improvement. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Monitoring, Measurement and Evaluation Procedure for ISO/IEC 42001

Monitoring, Measurement and Evaluation Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Monitoring, Measurement and Metrics Procedure for ISO/IEC 27001:2022

Defines what you measure to know whether controls and the ISMS are effective. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Monitoring, Measurement, Analysis and Evaluation Procedure for ISO 14001:2026

Monitors, measures, analyzes and evaluates environmental performance and EMS effectiveness. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Monitoring, Training and Internal Audit Procedure for EU GDPR

Monitoring, Training and Internal Audit Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Network and Data Flow Diagram Guide for NIST 800-171 / CMMC

Network and Data Flow Diagram Guide. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Network Security Policy for ISO/IEC 27001:2022

Protects networks and network services. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

NIS2 Add-On for ISO/IEC 27001:2022

Extends an existing ISO/IEC 27001 system to NIS2 (Directive (EU) 2022/2555): applicability assessment, Article 21 mapping workbook, incident reporting procedure, management body accountability record and supply chain addendum, with worked examples. Not legal advice.

NIST AI RMF Crosswalk (ISO/IEC 42001, 23894, 42005, EU AI Act) for NIST AI RMF

NIST AI RMF Crosswalk (ISO/IEC 42001, 23894, 42005, EU AI Act). Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

NIST AI RMF Practitioner Guide for NIST AI RMF

NIST AI RMF Practitioner Guide. Editable Word file aligned with the NIST AI RMF 1.0.

Non-Disclosure Agreement Template for ISO/IEC 27001:2022

Protects confidential information shared with individuals or organizations. Editable Word file aligned with ISO/IEC 27001:2022.

Nonconformity and Corrective Action Record for ISO/IEC 42001

Nonconformity and Corrective Action Record. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Nonconformity and Corrective Action Report for ISO 14001:2026

Records nonconformities, causes, actions and effectiveness. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Nonconformity and Corrective Action Report for ISO 9001:2026

Records a nonconformity, contains it, finds the root cause, takes corrective action and verifies effectiveness. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Nonconformity and Corrective Action Report for ISO/IEC 27001:2022

Records a nonconformity, its cause, correction, corrective action and effectiveness. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Nonconformity, Corrective Action and Continual Improvement Procedure for ISO 14001:2026

Reacts to nonconformities and incidents, corrects causes and drives continual improvement. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Nonconformity, Corrective Action and Improvement Procedure for ISO 9001:2026

Reacts to nonconformities and complaints, removes root causes, verifies effectiveness, and drives continual improvement of the QMS. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Nonconformity, Corrective Action and Improvement Procedure for ISO/IEC 27001:2022

Reacts to nonconformities, removes their causes and improves the ISMS continually. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Nonconformity, Corrective Action and Improvement Procedure for ISO/IEC 42001

Nonconformity, Corrective Action and Improvement Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Not-High-Risk (Article 6(3)) Assessment for EU AI Act

Not-High-Risk (Article 6(3)) Assessment. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Operational Control and Externally Provided Processes Procedure for ISO 14001:2026

Controls operations linked to significant aspects and obligations, including life cycle considerations and externally provided processes, products and services. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Organizational Knowledge Management for ISO 9001:2026

Identifies the knowledge needed to achieve the intended results of the QMS, and retains, applies and shares it. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Personal Data Breach Policy for EU GDPR

Personal Data Breach Policy. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Personal Data Breach Response Procedure for EU GDPR

Personal Data Breach Response Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Personal Information in AI Systems Procedure for SOC 2 + AI

Personal Information in AI Systems Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

Personnel Screening, Transfer and Termination Procedure for NIST 800-171 / CMMC

Personnel Screening, Transfer and Termination Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Personnel Security and Training Procedure for SOC 2

Personnel Security and Training Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Personnel Security Policy for NIST 800-171 / CMMC

Personnel Security Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Physical Access and Visitor Procedure for NIST 800-171 / CMMC

Physical Access and Visitor Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Physical Access Procedure for SOC 2

Physical Access Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Physical and Environmental Security Policy for ISO/IEC 27001:2022

Protects premises and equipment from unauthorized access, damage and interference. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Physical Protection Policy for NIST 800-171 / CMMC

Physical Protection Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Planning and Control of Changes Procedure for ISO 14001:2026

Makes sure changes that affect or could affect the EMS are planned and managed so the EMS keeps achieving its intended outcomes. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Planning and Control of Changes Procedure for ISO 9001:2026

Ensures changes to the QMS and production or service provision are planned, reviewed, authorized and verified so that QMS integrity and product conformity are maintained. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Planning of Changes Procedure for ISO/IEC 27001:2022

Plans changes to the ISMS so they are carried out in a controlled way. Technical changes follow POL-15. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

POA&M and Evidence Workbook for NIST 800-171 / CMMC

POA&M and Evidence Workbook. Editable Excel workbook aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

POA&M Management Procedure for NIST 800-171 / CMMC

POA&M Management Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Policies Pack for DORA (Financial Entities)

Includes 12 editable Word files from the full kit: Digital Operational Resilience Strategy, ICT Risk Management Policy, Information Security Policy, ICT Third-Party Risk Policy and 8 more. Worked examples included.

Policies Pack for EU AI Act

5 editable documents aligned with the EU AI Act (Regulation (EU) 2024/1689), with PDF copies of Word files and worked examples where available.

Policies Pack for EU GDPR

8 editable documents aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules, with PDF copies of Word files and worked examples where available.

Policies Pack for GDPR for AI

2 editable documents aligned with the GDPR as it applies to AI, with PDF copies of Word files and worked examples where available.

Policies Pack for ISO/IEC 27001:2022

Includes 25 editable Word files from the full kit: Information Security Policy, Acceptable Use Policy, Access Control Policy, Asset Management and Information Classification Policy and 21 more.

Policies Pack for ISO/IEC 42001

3 editable documents aligned with ISO/IEC 42001:2023, with PDF copies of Word files and worked examples where available.

Policies Pack for NIST 800-171 / CMMC

15 editable documents aligned with NIST SP 800-171 and CMMC Levels 1 and 2, with PDF copies of Word files and worked examples where available.

Policies Pack for NIST AI RMF

3 editable documents aligned with the NIST AI RMF 1.0, with PDF copies of Word files and worked examples where available.

Policies Pack for SOC 2

14 editable documents aligned with the SOC 2 Trust Services Criteria, with PDF copies of Word files and worked examples where available.

Policies Pack for SOC 2 + AI

1 editable documents aligned with SOC 2 with AI systems in scope, with PDF copies of Word files and worked examples where available.

Policy Acknowledgment Form for SOC 2

Policy Acknowledgment Form. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Policy and Procedure Approval Record for NIST 800-171 / CMMC

Policy and Procedure Approval Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Post-Incident Review and Lessons Learned Procedure for DORA (Financial Entities)

Learns from incidents and tests and improves resilience. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Post-Incident Review Report for DORA (Financial Entities)

Records lessons from a major incident or test. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Post-Market Monitoring Plan Template for EU AI Act

Post-Market Monitoring Plan Template. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Post-Market Monitoring Procedure for EU AI Act

Post-Market Monitoring Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Practitioner Guide and Program Status for NIST 800-171 / CMMC

Practitioner Guide and Program Status. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Practitioner Guide for ISO 14001:2026

A practical guide to ISO 14001:2026: what each requirement means, the evidence to keep, and a step-by-step implementation path. Editable Word file aligned with ISO 14001:2026.

Practitioner Guide for ISO 14001:2026

The practitioner guide on its own (PDF): every ISO 14001:2026 requirement explained in plain language, the evidence to keep, and a step-by-step implementation path.

Practitioner Guide for ISO 9001:2026

The practitioner guide on its own (PDF): every ISO 9001:2026 requirement explained in plain language, the evidence to keep, and a step-by-step implementation path.

Practitioner Guide for ISO 9001:2026

A practical guide to ISO 9001:2026: what each requirement means, the evidence to keep, and a step-by-step implementation path. Editable Word file aligned with ISO 9001:2026.

Practitioner Guide for ISO/IEC 27001:2022

The practitioner guide on its own (PDF): every ISO/IEC 27001:2022 requirement explained in plain language, the evidence to keep, and a step-by-step implementation path.

Practitioner Guide for ISO/IEC 27001:2022

A practical guide to ISO/IEC 27001:2022: what each requirement means, the evidence to keep, and a step-by-step implementation path. Editable Word file aligned with ISO/IEC 27001:2022.

Practitioner Guide for ISO/IEC 42001

ISO/IEC 42001 Practitioner Guide. Editable Word file aligned with ISO/IEC 42001:2023.

Pre-Audit Readiness Checklist for SOC 2

Pre-Audit Readiness Checklist. Editable Excel workbook aligned with the SOC 2 Trust Services Criteria.

Privacy and Protection of PII Policy for ISO/IEC 27001:2022

Protects personal data and meets privacy obligations. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Privacy Notice Template for EU GDPR

Privacy Notice Template. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Privacy Operations Procedure for SOC 2

Privacy Operations Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Privacy Policy (Internal) for SOC 2

Privacy Policy (Internal). Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Privacy Registers Workbook (RoPA, requests, breaches, vendors, transfers, retention) for EU GDPR

Privacy Registers Workbook (RoPA, requests, breaches, vendors, transfers, retention). Editable Excel workbook aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Privacy Request and Complaint Record for SOC 2

Privacy Request and Complaint Record. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Procedures Pack for EU AI Act

24 editable documents aligned with the EU AI Act (Regulation (EU) 2024/1689), with PDF copies of Word files and worked examples where available.

Procedures Pack for EU GDPR

21 editable documents aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules, with PDF copies of Word files and worked examples where available.

Procedures Pack for GDPR for AI

14 editable documents aligned with the GDPR as it applies to AI, with PDF copies of Word files and worked examples where available.

Procedures Pack for ISO 14001:2026

Includes 18 editable Word files from the full kit: Context, Interested Parties and Scope Procedure, Environmental Aspects and Life Cycle Procedure, Compliance Obligations and Evaluation of Compliance Procedure, Risks, Opportunities and Planning Action Procedure and 14 more.

Procedures Pack for ISO 9001:2026

Includes 16 editable Word files from the full kit: Context of the Organization Procedure, Leadership Roles and Quality Culture Procedure, Risk and Opportunity Management Procedure, Planning and Control of Changes Procedure and 12 more.

Procedures Pack for ISO/IEC 42001

18 editable documents aligned with ISO/IEC 42001:2023, with PDF copies of Word files and worked examples where available.

Procedures Pack for NIST 800-171 / CMMC

23 editable documents aligned with NIST SP 800-171 and CMMC Levels 1 and 2, with PDF copies of Word files and worked examples where available.

Procedures Pack for NIST AI RMF

17 editable documents aligned with the NIST AI RMF 1.0, with PDF copies of Word files and worked examples where available.

Procedures Pack for SOC 2

19 editable documents aligned with the SOC 2 Trust Services Criteria, with PDF copies of Word files and worked examples where available.

Procedures Pack for SOC 2 + AI

10 editable documents aligned with SOC 2 with AI systems in scope, with PDF copies of Word files and worked examples where available.

Process Map and Interaction Template for ISO 9001:2026

A process landscape plus one card per process (inputs, outputs, owner, resources, controls, risks, KPIs), aligned with ISO 9001:2026 clause 4.4. Includes a worked example.

Processing Activity Intake Form for EU GDPR

Processing Activity Intake Form. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Processing Integrity Procedure for SOC 2

Processing Integrity Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Processor and Vendor Management Procedure for EU GDPR

Processor and Vendor Management Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Processor Due Diligence Questionnaire for EU GDPR

Processor Due Diligence Questionnaire. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Production Monitoring Procedure for NIST AI RMF

Production Monitoring Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Production, Service Provision and Release Procedure for ISO 9001:2026

Carries out production and service provision under controlled conditions and releases products only when planned arrangements have been satisfactorily completed. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Program Review and Continual Improvement Procedure for NIST AI RMF

Program Review and Continual Improvement Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Program Review Minutes for NIST AI RMF

Program Review Minutes. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Prohibited AI Practices Screening Procedure for EU AI Act

Prohibited AI Practices Screening Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Project Kickoff Agenda and Progress Report for ISO 14001:2026

Launches the ISO 14001:2026 implementation or transition project and reports progress. Editable Word file aligned with ISO 14001:2026.

Project Kickoff Agenda and Progress Report for ISO/IEC 27001:2022

Kicks off the ISMS project and reports progress to top management. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Purpose and Legal Basis Procedure for EU GDPR

Purpose and Legal Basis Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Purpose and Legal Basis Procedure for GDPR for AI

Purpose and Legal Basis Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

QMS Records Workbook for ISO 9001:2026

An Excel workbook with ready-made formulas, dropdowns and summaries for QMS Records Workbook. Editable Excel file aligned with ISO 9001:2026. Includes a completed worked example.

Quality + Environment Bundle — Complete

Includes the ISO 9001:2026 and ISO 14001:2026 kits in the Complete edition, plus a Bundle Guide that shows how to run them as one management system. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

Quality + Environment Bundle — Consultant

Includes the ISO 9001:2026 and ISO 14001:2026 kits in the Consultant edition, plus a Bundle Guide that shows how to run them as one management system. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

Quality + Environment Bundle — Essentials

Includes the ISO 9001:2026 and ISO 14001:2026 kits in the Essentials edition, plus a Bundle Guide that shows how to run them as one management system. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

Quality + Information Security Bundle — Complete

Includes the ISO 9001:2026 and ISO/IEC 27001:2022 kits in the Complete edition, plus a Bundle Guide that shows how to run them as one management system. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides.

Quality + Information Security Bundle — Consultant

Includes the ISO 9001:2026 and ISO/IEC 27001:2022 kits in the Consultant edition, plus a Bundle Guide that shows how to run them as one management system. The Consultant edition includes everything in Complete, plus white-label unbranded documents for unlimited clients and a consultant toolkit.

Quality + Information Security Bundle — Essentials

Includes the ISO 9001:2026 and ISO/IEC 27001:2022 kits in the Essentials edition, plus a Bundle Guide that shows how to run them as one management system. The Essentials edition includes the editable core documents, workbooks and a Start Here guide.

Quality and Ethics Concern Log for ISO 9001:2026

Records quality and ethical concerns raised by anyone working for you, how they were handled, and the outcome — providing evidence that the concern channel in QMS-POL-02 works. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Quality Culture and Ethics Pack for ISO 9001:2026

Includes 4 editable Word files from the full kit: Awareness Training Record, Quality and Ethics Concern Log, Quality Culture and Ethics Statement, Leadership Roles and Quality Culture Procedure.

Quality Culture and Ethics Statement for ISO 9001:2026

Describes the quality culture and ethical behavior top management expects and promotes, so everyone understands it and can act on it. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Quality Management System Procedure for AI Providers for EU AI Act

Quality Management System Procedure for AI Providers. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Quality Manual for ISO 9001:2026

This manual describes the quality management system (QMS) of your organization, its scope and processes and how it meets each requirement of ISO 9001:2026, clause by clause. It is the top-level document; procedures in 04_Procedures provide the detail. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Quality Policy and Objectives for ISO 9001:2026

Sets out the commitments of top management and the measurable quality objectives that support your strategy. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Readiness and Gap Assessment Workbook for EU AI Act

Readiness and Gap Assessment Workbook. Editable Excel workbook aligned with the EU AI Act (Regulation (EU) 2024/1689).

Readiness Assessment Workbook (61 criteria) for SOC 2

Readiness Assessment Workbook (61 criteria). Editable Excel workbook aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Readiness Kit for NIST SP 800-171 and CMMC — Complete

Documents aligned with NIST SP 800-171 and CMMC Levels 1-2: a program manual, 15 policies, 23 procedures, 8 templates, 13 forms, 3 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides. Not legal advice.

Readiness Kit for NIST SP 800-171 and CMMC — Consultant

Documents aligned with NIST SP 800-171 and CMMC Levels 1-2: a program manual, 15 policies, 23 procedures, 8 templates, 13 forms, 3 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Consultant edition adds everything in Complete plus a consultant toolkit (engagement letter, project plan and fee calculator, pricing guide, kickoff slides) and the Consultant License. Not legal advice.

Readiness Kit for NIST SP 800-171 and CMMC — Essentials

Documents aligned with NIST SP 800-171 and CMMC Levels 1-2: a program manual, 15 policies, 21 procedures, 6 templates, 11 forms, 3 workbooks and 1 checklists, with a Kit Navigator, PDF copies and SHA-256 checksums. Not legal advice.

Readiness Kit for SOC 2 — Complete

Documents aligned with SOC 2: a program manual, 14 policies, 19 procedures, 8 templates, 14 forms, 3 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides. Not legal advice.

Readiness Kit for SOC 2 — Consultant

Documents aligned with SOC 2: a program manual, 14 policies, 19 procedures, 8 templates, 14 forms, 3 workbooks, 2 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Consultant edition adds everything in Complete plus a consultant toolkit (engagement letter, project plan and fee calculator, pricing guide, kickoff slides) and the Consultant License. Not legal advice.

Readiness Kit for SOC 2 — Essentials

Documents aligned with SOC 2: a program manual, 14 policies, 19 procedures, 7 templates, 13 forms and 3 workbooks, with a Kit Navigator, PDF copies and SHA-256 checksums. Not legal advice.

Readiness Workbook for DORA (ICT Service Providers)

Includes 1 editable Excel file from the full kit: DORA Supplier Readiness Workbook. Worked examples included.

Real-World Testing and Sandbox Procedure for EU AI Act

Real-World Testing and Sandbox Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Records of Processing Activities Procedure for EU GDPR

Records of Processing Activities Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Red-Team Finding Report for NIST AI RMF

Red-Team Finding Report. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Red-Teaming and Adversarial Testing Procedure for NIST AI RMF

Red-Teaming and Adversarial Testing Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Register of Information Data Sheet for DORA (ICT Service Providers)

Gives financial clients the data they need about you for their register of information. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Register of Information for DORA (Financial Entities)

An Excel workbook with ready-made formulas, dropdowns and summaries for Register of Information. Editable Excel file aligned with DORA (Financial Entities). Includes a completed worked example.

Register of Information Procedure for DORA (Financial Entities)

Keeps a complete and accurate register of information on all ICT contractual arrangements and submits it when required. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Register of Information Workbook for DORA (Financial Entities)

Includes 2 editable Excel and Word files from the full kit: Register of Information Procedure, Register of Information. Worked examples included.

Remote Access, Wireless and Mobile Device Procedure for NIST 800-171 / CMMC

Remote Access, Wireless and Mobile Device Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Remote Working and Mobile Devices Policy for ISO/IEC 27001:2022

Protects information when working outside company premises. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Reporting of Concerns Procedure for ISO/IEC 42001

Reporting of Concerns Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Requirement Assessment Record for NIST 800-171 / CMMC

Requirement Assessment Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Requirements and Evidence Matrix Workbook for EU AI Act

Requirements and Evidence Matrix Workbook. Editable Excel workbook aligned with the EU AI Act (Regulation (EU) 2024/1689).

Requirements and Evidence Matrix Workbook for EU GDPR

Requirements and Evidence Matrix Workbook. Editable Excel workbook aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Requirements and Evidence Matrix Workbook for GDPR for AI

Requirements and Evidence Matrix Workbook. Editable Excel workbook aligned with the GDPR as it applies to AI.

Requirements and Evidence Matrix Workbook for ISO/IEC 42001

Requirements and Evidence Matrix Workbook. Editable Excel workbook aligned with ISO/IEC 42001:2023.

Requirements and Evidence Matrix Workbook for NIST AI RMF

Requirements and Evidence Matrix Workbook. Editable Excel workbook aligned with the NIST AI RMF 1.0.

Requirements and Evidence Matrix Workbook for SOC 2 + AI

Requirements and Evidence Matrix Workbook. Editable Excel workbook aligned with SOC 2 with AI systems in scope.

Resilience Testing and TLPT Participation Procedure for DORA (ICT Service Providers)

Takes part in clients' digital operational resilience testing, including threat-led penetration testing where required. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Resilience Testing and TLPT Procedure for DORA (Financial Entities)

Runs the yearly testing program and, where required, threat-led penetration testing. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Responsible AI Use Policy for ISO/IEC 42001

Responsible AI Use Policy. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Responsible and Acceptable AI Use Policy for NIST AI RMF

Responsible and Acceptable AI Use Policy. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Responsible Use of AI Systems Procedure for ISO/IEC 42001

Responsible Use of AI Systems Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Retention and Deletion Procedure for EU GDPR

Retention and Deletion Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Risk Acceptance and Exception Form for SOC 2

Risk Acceptance and Exception Form. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Risk Acceptance Form for ISO/IEC 27001:2022

Records a risk owner's acceptance of residual risk. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Risk and Opportunity Management Procedure for ISO 9001:2026

Defines how your organization determines, analyzes, evaluates and addresses risks and, separately, opportunities, and how the effectiveness of actions is evaluated. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Risk Assessment and Statement of Applicability Workbook for ISO/IEC 27001:2022

Includes 4 editable Excel and Word files from the full kit: Risk Acceptance Form, Information Security Risk Assessment and Treatment Procedure, Statement of Applicability Management Procedure, Risk Assessment and Statement of Applicability Workbook. Worked examples included.

Risk Assessment and Statement of Applicability Workbook for ISO/IEC 27001:2022

An Excel workbook with ready-made formulas, dropdowns and summaries for Risk Assessment and Statement of Applicability Workbook. Editable Excel file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Risk Assessment and Vulnerability Management Procedure for NIST 800-171 / CMMC

Risk Assessment and Vulnerability Management Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Risk Assessment Policy for NIST 800-171 / CMMC

Risk Assessment Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Risk Assessment Procedure for SOC 2

Risk Assessment Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Risk Assessment Record for NIST 800-171 / CMMC

Risk Assessment Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Risk Classification Record for EU AI Act

Risk Classification Record. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Risk Management Policy for SOC 2

Risk Management Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Risk Response and Treatment Procedure for NIST AI RMF

Risk Response and Treatment Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Risk Response Record for NIST AI RMF

Risk Response Record. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Risk Tolerance and Tiering Procedure for NIST AI RMF

Risk Tolerance and Tiering Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Risk Tolerance Statement for NIST AI RMF

Risk Tolerance Statement. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Risk Treatment Plan and Residual Risk Approval for ISO/IEC 42001

Risk Treatment Plan and Residual Risk Approval. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Risks, Opportunities and Planning Action Procedure for ISO 14001:2026

Determines the risks and opportunities that must be addressed and plans actions for significant aspects, compliance obligations and risks and opportunities. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Role Profile and Job Description Template for ISO 9001:2026

Defines responsibilities, authorities and competence requirements per role, aligned with ISO 9001:2026 clauses 5.3 and 7.2. Includes a worked example.

Role Training: AI System Owners and Developers for EU AI Act

Role Training: AI System Owners and Developers. Editable PowerPoint deck aligned with the EU AI Act (Regulation (EU) 2024/1689).

Role Training: AI System Owners for ISO/IEC 42001

Role Training: AI System Owners. Editable PowerPoint deck aligned with ISO/IEC 42001:2023.

Role Training: AI System Owners for NIST AI RMF

Role Training: AI System Owners. Editable PowerPoint deck aligned with the NIST AI RMF 1.0.

Role Training: AI System Owners for SOC 2 + AI

Role Training: AI System Owners. Editable PowerPoint deck aligned with SOC 2 with AI systems in scope.

Role Training: All Staff for ISO 14001:2026

Role-based training deck for all staff, covering what they need to know and do. Editable PowerPoint file aligned with ISO 14001:2026.

Role Training: All Staff for ISO 9001:2026

Role-based training deck for all staff, covering what they need to know and do. Editable PowerPoint file aligned with ISO 9001:2026.

Role Training: All Staff for ISO/IEC 27001:2022

Role-based training deck for all staff, covering what they need to know and do. Editable PowerPoint file aligned with ISO/IEC 27001:2022.

Role Training: Client-Facing and Technical Teams for DORA (ICT Service Providers)

Role-based training deck for client-facing and technical teams, covering what they need to know and do. Editable PowerPoint file aligned with DORA (ICT Service Providers).

Role Training: Control and Risk Owners for ISO/IEC 27001:2022

Role-based training deck for control and risk owners, covering what they need to know and do. Editable PowerPoint file aligned with ISO/IEC 27001:2022.

Role Training: Control Owners for SOC 2

Role Training: Control Owners. Editable PowerPoint deck aligned with the SOC 2 Trust Services Criteria.

Role Training: CUI Users for NIST 800-171 / CMMC

Role Training: CUI Users. Editable PowerPoint deck aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Role Training: Developers and Data Scientists for GDPR for AI

Role Training: Developers and Data Scientists. Editable PowerPoint deck aligned with the GDPR as it applies to AI.

Role Training: Developers and Data Teams for ISO/IEC 42001

Role Training: Developers and Data Teams. Editable PowerPoint deck aligned with ISO/IEC 42001:2023.

Role Training: Developers and TEVV Teams for NIST AI RMF

Role Training: Developers and TEVV Teams. Editable PowerPoint deck aligned with the NIST AI RMF 1.0.

Role Training: DPO and Privacy Team for EU GDPR

Role Training: DPO and Privacy Team. Editable PowerPoint deck aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Role Training: DPO and Privacy Team for GDPR for AI

Role Training: DPO and Privacy Team. Editable PowerPoint deck aligned with the GDPR as it applies to AI.

Role Training: Engineers for SOC 2

Role Training: Engineers. Editable PowerPoint deck aligned with the SOC 2 Trust Services Criteria.

Role Training: Function and Risk Owners for DORA (Financial Entities)

Role-based training deck for function and risk owners, covering what they need to know and do. Editable PowerPoint file aligned with DORA (Financial Entities).

Role Training: Human Oversight Persons for EU AI Act

Role Training: Human Oversight Persons. Editable PowerPoint deck aligned with the EU AI Act (Regulation (EU) 2024/1689).

Role Training: Independent Reviewers for NIST AI RMF

Role Training: Independent Reviewers. Editable PowerPoint deck aligned with the NIST AI RMF 1.0.

Role Training: Internal Assessors for NIST 800-171 / CMMC

Role Training: Internal Assessors. Editable PowerPoint deck aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Role Training: Internal Audit for DORA (Financial Entities)

Role-based training deck for internal audit, covering what they need to know and do. Editable PowerPoint file aligned with DORA (Financial Entities).

Role Training: Internal Auditors for EU AI Act

Role Training: Internal Auditors. Editable PowerPoint deck aligned with the EU AI Act (Regulation (EU) 2024/1689).

Role Training: Internal Auditors for ISO 14001:2026

Role-based training deck for internal auditors, covering what they need to know and do. Editable PowerPoint file aligned with ISO 14001:2026.

Role Training: Internal Auditors for ISO 9001:2026

Role-based training deck for internal auditors, covering what they need to know and do. Editable PowerPoint file aligned with ISO 9001:2026.

Role Training: Internal Auditors for ISO/IEC 27001:2022

Role-based training deck for internal auditors, covering what they need to know and do. Editable PowerPoint file aligned with ISO/IEC 27001:2022.

Role Training: Internal Auditors for ISO/IEC 42001

Role Training: Internal Auditors. Editable PowerPoint deck aligned with ISO/IEC 42001:2023.

Role Training: Internal Reviewers for DORA (ICT Service Providers)

Role-based training deck for internal reviewers, covering what they need to know and do. Editable PowerPoint file aligned with DORA (ICT Service Providers).

Role Training: Internal Reviewers for EU GDPR

Role Training: Internal Reviewers. Editable PowerPoint deck aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Role Training: Internal Reviewers for GDPR for AI

Role Training: Internal Reviewers. Editable PowerPoint deck aligned with the GDPR as it applies to AI.

Role Training: Internal Reviewers for SOC 2

Role Training: Internal Reviewers. Editable PowerPoint deck aligned with the SOC 2 Trust Services Criteria.

Role Training: Internal Reviewers for SOC 2 + AI

Role Training: Internal Reviewers. Editable PowerPoint deck aligned with SOC 2 with AI systems in scope.

Role Training: IT and Security Administrators for NIST 800-171 / CMMC

Role Training: IT and Security Administrators. Editable PowerPoint deck aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Role Training: Leadership for DORA (ICT Service Providers)

Role-based training deck for leadership, covering what they need to know and do. Editable PowerPoint file aligned with DORA (ICT Service Providers).

Role Training: ML Engineers for SOC 2 + AI

Role Training: ML Engineers. Editable PowerPoint deck aligned with SOC 2 with AI systems in scope.

Role Training: Process Owners for ISO 14001:2026

Role-based training deck for process owners, covering what they need to know and do. Editable PowerPoint file aligned with ISO 14001:2026.

Role Training: Process Owners for ISO 9001:2026

Role-based training deck for process owners, covering what they need to know and do. Editable PowerPoint file aligned with ISO 9001:2026.

Role Training: Senior Leadership for NIST 800-171 / CMMC

Role Training: Senior Leadership. Editable PowerPoint deck aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Role Training: Service Owners for DORA (ICT Service Providers)

Role-based training deck for service owners, covering what they need to know and do. Editable PowerPoint file aligned with DORA (ICT Service Providers).

Role Training: Staff Handling Personal Data for EU GDPR

Role Training: Staff Handling Personal Data. Editable PowerPoint deck aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Role Training: Top Management for EU AI Act

Role Training: Top Management. Editable PowerPoint deck aligned with the EU AI Act (Regulation (EU) 2024/1689).

Role Training: Top Management for EU GDPR

Role Training: Top Management. Editable PowerPoint deck aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Role Training: Top Management for GDPR for AI

Role Training: Top Management. Editable PowerPoint deck aligned with the GDPR as it applies to AI.

Role Training: Top Management for ISO 14001:2026

Role-based training deck for top management, covering what they need to know and do. Editable PowerPoint file aligned with ISO 14001:2026.

Role Training: Top Management for ISO 9001:2026

Role-based training deck for top management, covering what they need to know and do. Editable PowerPoint file aligned with ISO 9001:2026.

Role Training: Top Management for ISO/IEC 27001:2022

Role-based training deck for top management, covering what they need to know and do. Editable PowerPoint file aligned with ISO/IEC 27001:2022.

Role Training: Top Management for ISO/IEC 42001

Role Training: Top Management. Editable PowerPoint deck aligned with ISO/IEC 42001:2023.

Role Training: Top Management for NIST AI RMF

Role Training: Top Management. Editable PowerPoint deck aligned with the NIST AI RMF 1.0.

Role Training: Top Management for SOC 2

Role Training: Top Management. Editable PowerPoint deck aligned with the SOC 2 Trust Services Criteria.

Role Training: Top Management for SOC 2 + AI

Role Training: Top Management. Editable PowerPoint deck aligned with SOC 2 with AI systems in scope.

Roles, Accountability and Training Procedure for NIST AI RMF

Roles, Accountability and Training Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Scope and Roles Procedure (Controller, Processor, Joint Controller) for GDPR for AI

Scope and Roles Procedure (Controller, Processor, Joint Controller). Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Scope, Roles and EU Representative Procedure for EU GDPR

Scope, Roles and EU Representative Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Scoping and Asset Categorization Procedure for NIST 800-171 / CMMC

Scoping and Asset Categorization Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Scoping and Readiness Procedure for SOC 2

Scoping and Readiness Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Scoping, Asset Inventory and Shared Responsibility Workbook for NIST 800-171 / CMMC

Scoping, Asset Inventory and Shared Responsibility Workbook. Editable Excel workbook aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Secure Development Policy for ISO/IEC 27001:2022

Builds security into software development, from requirements to release. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Secure Development Policy for SOC 2

Secure Development Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Security Assessment Policy for NIST 800-171 / CMMC

Security Assessment Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Security Awareness and Insider Threat Training Procedure for NIST 800-171 / CMMC

Security Awareness and Insider Threat Training Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Security Awareness Deck for SOC 2

Security Awareness Deck. Editable PowerPoint deck aligned with the SOC 2 Trust Services Criteria.

Security Awareness Quiz for SOC 2

Security Awareness Quiz. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Security Awareness Training Pack for ISO/IEC 27001:2022

Includes 5 editable PowerPoint and Word files from the full kit: Awareness Training Record, Awareness Quiz and Answer Key, Training Completion Certificate, Acceptable Use Policy and 1 more.

Security Awareness Training Record for SOC 2

Security Awareness Training Record. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Security of Processing Procedure for EU GDPR

Security of Processing Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Security Roles RACI for SOC 2

Security Roles RACI. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Self-Assessment and SPRS Score Workbook (110 requirements, 320 objectives) for NIST 800-171 / CMMC

Self-Assessment and SPRS Score Workbook (110 requirements, 320 objectives). Editable Excel workbook aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Self-Assessment, SPRS Score and Affirmation Procedure for NIST 800-171 / CMMC

Self-Assessment, SPRS Score and Affirmation Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Senior Official Affirmation Record for NIST 800-171 / CMMC

Senior Official Affirmation Record. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Serious Incident and Corrective Action Procedure for EU AI Act

Serious Incident and Corrective Action Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Serious Incident Report for EU AI Act

Serious Incident Report. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Significant Cyber Threat Notification for DORA (Financial Entities)

Notifies a significant cyber threat to the competent authority voluntarily. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Simplified ICT Risk Management Framework for DORA (Financial Entities)

Gives eligible smaller entities a single-document ICT risk management framework. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Site Environmental Inspection Checklist for ISO 14001:2026

Inspects operational controls on site. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

SOC 2 + AI Add-On — Complete

Documents aligned with SOC 2 with AI in scope: 1 policies, 10 procedures, 3 templates, 5 forms, 3 workbooks, 1 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Complete edition adds worked examples for a fictional company, training materials, industry annexes and video guides. Not legal advice.

SOC 2 + AI Add-On — Consultant

Documents aligned with SOC 2 with AI in scope: 1 policies, 10 procedures, 3 templates, 5 forms, 3 workbooks, 1 checklists and 8 training items, with a Kit Navigator, PDF copies and SHA-256 checksums. The Consultant edition adds everything in Complete plus a consultant toolkit (engagement letter, project plan and fee calculator, pricing guide, kickoff slides) and the Consultant License. Not legal advice.

SOC 2 + AI Add-On — Essentials

Documents aligned with SOC 2 with AI in scope: 1 policies, 10 procedures, 2 templates, 4 forms and 3 workbooks, with a Kit Navigator, PDF copies and SHA-256 checksums. Not legal advice.

SOC 2 + AI Bundle — Complete

Includes the SOC 2 Readiness Kit and the SOC 2 + AI Add-On in the Complete edition, for SaaS and AI companies preparing AI components for a SOC 2 examination. Not legal advice.

SOC 2 + AI Practitioner Guide for SOC 2 + AI

SOC 2 + AI Practitioner Guide. Editable Word file aligned with SOC 2 with AI systems in scope.

SOC 2 AI Crosswalk (ISO/IEC 42001, NIST AI RMF, EU AI Act) for SOC 2 + AI

SOC 2 AI Crosswalk (ISO/IEC 42001, NIST AI RMF, EU AI Act). Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

SOC 2 AI Readiness Workbook for SOC 2 + AI

SOC 2 AI Readiness Workbook. Editable Excel workbook aligned with SOC 2 with AI systems in scope.

SOC 2 and ISO/IEC 27001 Crosswalk for SOC 2

SOC 2 and ISO/IEC 27001 Crosswalk. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

SOC 2 Practitioner Guide for SOC 2

SOC 2 Practitioner Guide. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Special Category and Criminal Data Assessment for EU GDPR

Special Category and Criminal Data Assessment. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Special Category Data Assessment for GDPR for AI

Special Category Data Assessment. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Special Category Data for Bias Correction Justification for EU AI Act

Special Category Data for Bias Correction Justification. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Spill and Emergency Response Plan for ISO 14001:2026

Sets out how you respond to the emergency scenarios identified in your aspects register. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Staff ICT Security Awareness Deck for DORA (Financial Entities)

ICT security awareness deck for all staff: everyday security behaviors and how to report incidents. Editable PowerPoint file aligned with DORA (Financial Entities).

Stakeholder Engagement and Feedback Procedure for NIST AI RMF

Stakeholder Engagement and Feedback Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Standard Contractual Clauses Selection Guide for EU GDPR

Standard Contractual Clauses Selection Guide. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Statement of Applicability Guide for ISO/IEC 42001

Statement of Applicability Guide. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Statement of Applicability Management Procedure for ISO/IEC 27001:2022

Produces and maintains the Statement of Applicability (SoA) so it always reflects the controls actually needed and implemented. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Subcontractor and Register Data Pack for DORA (ICT Service Providers)

Includes 4 editable Word files from the full kit: Material Change Notification, Subcontractor Management Procedure, Register of Information Data Sheet, Subcontractor Disclosure Statement. Worked examples included.

Subcontractor Disclosure Statement for DORA (ICT Service Providers)

Informs financial clients about subcontractors supporting your services and how you manage them. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Subcontractor Flow-Down Letter for NIST 800-171 / CMMC

Subcontractor Flow-Down Letter. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Subcontractor Flow-Down Procedure for NIST 800-171 / CMMC

Subcontractor Flow-Down Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Subcontractor Management Procedure for DORA (ICT Service Providers)

Identifies, assesses, monitors and reports subcontractors that support services provided to financial clients. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Supervisory Authority Cooperation and Complaints Procedure for EU GDPR

Supervisory Authority Cooperation and Complaints Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Supervisory Authority Interview Preparation Sheet for EU GDPR

Supervisory Authority Interview Preparation Sheet. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Supervisory Authority Interview Preparation Sheet for GDPR for AI

Supervisory Authority Interview Preparation Sheet. Editable Word file aligned with the GDPR as it applies to AI.

Supervisory Readiness Checklist for DORA (Financial Entities)

Checks you can show evidence quickly when your competent authority asks. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Supervisory Review Interview Preparation Sheet for DORA (Financial Entities)

Helps people prepare for interviews during supervisory reviews and internal audits of DORA compliance. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Supplier and Contractor Environmental Questionnaire for ISO 14001:2026

Communicates your environmental requirements to external providers and assesses their controls. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Supplier Contract Security Clauses for ISO/IEC 27001:2022

Provides model security clauses for supplier agreements. Editable Word file aligned with ISO/IEC 27001:2022.

Supplier Evaluation Form for ISO 9001:2026

Weighted supplier evaluation with pass scores by criticality and a recorded decision, aligned with ISO 9001:2026 clause 8.4.1. Includes a worked example.

Supplier Security Pack for ISO/IEC 27001:2022

Includes 6 editable Word files from the full kit: Supplier Security Questionnaire, Non-Disclosure Agreement Template, Supplier Security Policy, Cloud Services Policy and 2 more.

Supplier Security Policy for ISO/IEC 27001:2022

Manages information security risks from suppliers and the ICT supply chain. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Supplier Security Procedure for ISO/IEC 27001:2022

Assesses, contracts, monitors and exits suppliers in a way that manages information security risk. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Supplier Security Questionnaire for ISO/IEC 27001:2022

Assesses a supplier's information security before and during the relationship. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

System and Communications Protection Policy for NIST 800-171 / CMMC

System and Communications Protection Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

System and Information Integrity Policy for NIST 800-171 / CMMC

System and Information Integrity Policy. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

System Card Template for NIST AI RMF

System Card Template. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

System Description Checklist (DC1-DC9) for SOC 2

System Description Checklist (DC1-DC9). Editable Excel workbook aligned with the SOC 2 Trust Services Criteria.

System Description Template (DC 200) for SOC 2

System Description Template (DC 200). Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

System Maintenance Procedure for NIST 800-171 / CMMC

System Maintenance Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

System Security Plan Maintenance Procedure for NIST 800-171 / CMMC

System Security Plan Maintenance Procedure. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

System Security Plan Template for NIST 800-171 / CMMC

System Security Plan Template. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Tabletop Exercise Record for ISO/IEC 27001:2022

Plans and records an incident response tabletop exercise. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Technical Documentation and Record Retention Procedure for EU AI Act

Technical Documentation and Record Retention Procedure. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Technical Documentation File Template (Annex IV) for EU AI Act

Technical Documentation File Template (Annex IV). Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Termination and Transfer Checklist for NIST 800-171 / CMMC

Termination and Transfer Checklist. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Test Result and Remediation Record for DORA (Financial Entities)

Records any resilience, continuity or exit test and its follow-up. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Test, Evaluation, Verification and Validation (TEVV) Procedure for NIST AI RMF

Test, Evaluation, Verification and Validation (TEVV) Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

TEVV Plan Template for NIST AI RMF

TEVV Plan Template. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Third-Party AI Assessment for NIST AI RMF

Third-Party AI Assessment. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Third-Party AI Contract Clauses for NIST AI RMF

Third-Party AI Contract Clauses. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Third-Party and Customer Relationships Procedure for ISO/IEC 42001

Third-Party and Customer Relationships Procedure. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Third-Party and Pre-Trained Model Risk Procedure for NIST AI RMF

Third-Party and Pre-Trained Model Risk Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Threat Intelligence and External Contacts Policy for ISO/IEC 27001:2022

Stays informed about threats and maintains contacts with authorities and specialist groups. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

TLPT Scope Specification for DORA (Financial Entities)

Sets the scope of threat-led penetration testing where the competent authority requires it. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Training and Input Data Procedure (Minimization, Accuracy, Retention, Special Categories) for GDPR for AI

Training and Input Data Procedure (Minimization, Accuracy, Retention, Special Categories). Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Training Completion Certificate for DORA (Financial Entities)

Confirms completion of DORA and ICT security training. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Training Completion Certificate for DORA (ICT Service Providers)

Records completion of DORA training. Editable Word file aligned with DORA (ICT Service Providers). Includes a completed worked example.

Training Completion Certificate for EU AI Act

Training Completion Certificate. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689).

Training Completion Certificate for EU GDPR

Training Completion Certificate. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Training Completion Certificate for GDPR for AI

Training Completion Certificate. Editable Word file aligned with the GDPR as it applies to AI.

Training Completion Certificate for ISO 14001:2026

A certificate template to record that a person completed the awareness training. Editable Word file aligned with ISO 14001:2026.

Training Completion Certificate for ISO 9001:2026

Gives attendees a record of completing the ISO 9001:2026 awareness or transition-team training. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Training Completion Certificate for ISO/IEC 27001:2022

Certifies completion of information security awareness training. Editable Word file aligned with ISO/IEC 27001:2022.

Training Completion Certificate for ISO/IEC 42001

Training Completion Certificate. Editable Word file aligned with ISO/IEC 42001:2023.

Training Completion Certificate for NIST 800-171 / CMMC

Training Completion Certificate. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2.

Training Completion Certificate for NIST AI RMF

Training Completion Certificate. Editable Word file aligned with the NIST AI RMF 1.0.

Training Completion Certificate for SOC 2

Training Completion Certificate. Editable Word file aligned with the SOC 2 Trust Services Criteria.

Training Completion Certificate for SOC 2 + AI

Training Completion Certificate. Editable Word file aligned with SOC 2 with AI systems in scope.

Training Content Summary Preparation Guide for EU AI Act

Training Content Summary Preparation Guide. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Training Deck for ISO 14001:2026

Awareness training deck for all staff on ISO 14001:2026 and how the management system works day to day. Editable PowerPoint file aligned with ISO 14001:2026.

Training Deck for ISO 9001:2026

Awareness training deck for all staff on ISO 9001:2026 and how the management system works day to day. Editable PowerPoint file aligned with ISO 9001:2026.

Training Deck for ISO/IEC 27001:2022

Awareness training deck for all staff on ISO/IEC 27001:2022 and how the management system works day to day. Editable PowerPoint file aligned with ISO/IEC 27001:2022.

Training Pack for EU AI Act

8 editable documents aligned with the EU AI Act (Regulation (EU) 2024/1689), with PDF copies of Word files and worked examples where available.

Training Pack for EU GDPR

8 editable documents aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules, with PDF copies of Word files and worked examples where available.

Training Pack for GDPR for AI

8 editable documents aligned with the GDPR as it applies to AI, with PDF copies of Word files and worked examples where available.

Training Pack for ISO 9001:2026

Includes 5 editable PowerPoint and Word files from the full kit: Awareness Training Record, Awareness Quiz and Answer Key, Training Completion Certificate, Auditor Interview Preparation Sheet and 1 more.

Training Pack for ISO/IEC 42001

8 editable documents aligned with ISO/IEC 42001:2023, with PDF copies of Word files and worked examples where available.

Training Pack for NIST 800-171 / CMMC

8 editable documents aligned with NIST SP 800-171 and CMMC Levels 1 and 2, with PDF copies of Word files and worked examples where available.

Training Pack for NIST AI RMF

8 editable documents aligned with the NIST AI RMF 1.0, with PDF copies of Word files and worked examples where available.

Training Pack for SOC 2

8 editable documents aligned with the SOC 2 Trust Services Criteria, with PDF copies of Word files and worked examples where available.

Training Pack for SOC 2 + AI

8 editable documents aligned with SOC 2 with AI systems in scope, with PDF copies of Word files and worked examples where available.

Transfer Impact Assessment for EU GDPR

Transfer Impact Assessment. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Transition and Certification Readiness Checklist for ISO 14001:2026

Confirms readiness before the certification or transition audit. Editable Word file aligned with ISO 14001:2026.

Transition and Implementation Workbook for ISO 14001:2026

An Excel workbook with ready-made formulas, dropdowns and summaries for Transition and Implementation Workbook. Editable Excel file aligned with ISO 14001:2026. Includes a completed worked example.

Transition Audit Readiness Checklist for ISO 9001:2026

A final 30-point check in the four weeks before the certification body's transition audit. Editable Word file aligned with ISO 9001:2026. Includes a completed worked example.

Transition Pack for ISO 14001:2026

Includes 4 editable Excel and Word files from the full kit: Internal Audit Plan and Report, Transition and Certification Readiness Checklist, Practitioner Guide, Auditor Interview Preparation Sheet and 1 more.

Transition Pack for ISO 9001:2026

Includes 4 editable Excel and Word files from the full kit: Internal Audit Plan and Report, Transition Audit Readiness Checklist, Practitioner Guide, Auditor Interview Preparation Sheet and 1 more.

Transition Workbook for ISO 9001:2026

Includes 1 editable Excel file from the full kit: Transition Workbook.

Transition Workbook for ISO 9001:2026

An Excel workbook with ready-made formulas, dropdowns and summaries for Transition Workbook. Editable Excel file aligned with ISO 9001:2026. Includes a completed worked example.

Transparency and AI Notices Procedure for GDPR for AI

Transparency and AI Notices Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Transparency and Privacy Notices Procedure for EU GDPR

Transparency and Privacy Notices Procedure. Editable Word file aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules. Includes a completed worked example.

Transparency Notices and Content Labels for EU AI Act

Transparency Notices and Content Labels. Editable Word file aligned with the EU AI Act (Regulation (EU) 2024/1689). Includes a completed worked example.

Trustworthiness Evaluation Procedure for NIST AI RMF

Trustworthiness Evaluation Procedure. Editable Word file aligned with the NIST AI RMF 1.0. Includes a completed worked example.

Unsanctioned AI Tools Procedure for SOC 2 + AI

Unsanctioned AI Tools Procedure. Editable Word file aligned with SOC 2 with AI systems in scope. Includes a completed worked example.

Use of AI Tools with Personal Data Policy for GDPR for AI

Use of AI Tools with Personal Data Policy. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

User Access Management Procedure for SOC 2

User Access Management Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Vendor Management Policy for SOC 2

Vendor Management Policy. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Vendor Risk Management Procedure for SOC 2

Vendor Risk Management Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Vendor Security and Privacy Clauses for SOC 2

Vendor Security and Privacy Clauses. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Vendor Security Assessment for SOC 2

Vendor Security Assessment. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Verification and Validation Plan Template for ISO/IEC 42001

Verification and Validation Plan Template. Editable Word file aligned with ISO/IEC 42001:2023. Includes a completed worked example.

Visitor Log for NIST 800-171 / CMMC

Visitor Log. Editable Word file aligned with NIST SP 800-171 and CMMC Levels 1 and 2. Includes a completed worked example.

Vulnerability and Patch Management Policy for ISO/IEC 27001:2022

Identifies and remediates technical vulnerabilities in time. Editable Word file aligned with ISO/IEC 27001:2022. Includes a completed worked example.

Vulnerability and Patch Management Procedure for DORA (Financial Entities)

Finds and fixes vulnerabilities before they are exploited. Editable Word file aligned with DORA (Financial Entities). Includes a completed worked example.

Vulnerability, Patch and Malware Management Procedure for SOC 2

Vulnerability, Patch and Malware Management Procedure. Editable Word file aligned with the SOC 2 Trust Services Criteria. Includes a completed worked example.

Waste Management Procedure for ISO 14001:2026

Minimizes, segregates, stores, transfers and records waste in line with the waste hierarchy and legal requirements. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Water and Energy Resources Procedure for ISO 14001:2026

Uses energy and water efficiently and tracks related emissions. Editable Word file aligned with ISO 14001:2026. Includes a completed worked example.

Web Scraping Assessment Form for GDPR for AI

Web Scraping Assessment Form. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Web Scraping for AI Procedure for GDPR for AI

Web Scraping for AI Procedure. Editable Word file aligned with the GDPR as it applies to AI. Includes a completed worked example.

Website and Cookie Compliance Checklist for EU GDPR

Website and Cookie Compliance Checklist. Editable Excel workbook aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules.

Work Instruction Template for ISO 9001:2026

A short step-by-step work instruction format with acceptance criteria, for tasks where instructions protect conformity (7.5, 8.5.1). Includes a worked example.

Workbooks and Checklists Pack for EU AI Act

6 editable documents aligned with the EU AI Act (Regulation (EU) 2024/1689), with PDF copies of Word files and worked examples where available.

Workbooks and Checklists Pack for EU GDPR

6 editable documents aligned with the EU GDPR (Regulation (EU) 2016/679) and ePrivacy rules, with PDF copies of Word files and worked examples where available.

Workbooks and Checklists Pack for GDPR for AI

5 editable documents aligned with the GDPR as it applies to AI, with PDF copies of Word files and worked examples where available.

Workbooks and Checklists Pack for ISO/IEC 42001

6 editable documents aligned with ISO/IEC 42001:2023, with PDF copies of Word files and worked examples where available.

Workbooks and Checklists Pack for NIST 800-171 / CMMC

6 editable documents aligned with NIST SP 800-171 and CMMC Levels 1 and 2, with PDF copies of Word files and worked examples where available.

Workbooks and Checklists Pack for NIST AI RMF

7 editable documents aligned with the NIST AI RMF 1.0, with PDF copies of Word files and worked examples where available.

Workbooks and Checklists Pack for SOC 2

6 editable documents aligned with the SOC 2 Trust Services Criteria, with PDF copies of Word files and worked examples where available.

Workbooks and Checklists Pack for SOC 2 + AI

5 editable documents aligned with SOC 2 with AI systems in scope, with PDF copies of Word files and worked examples where available.