Free kits and plain-language guidance for building and evidencing a security programme: ISO/IEC 27001:2022, NIST CSF 2.0, security awareness, data protection and cloud security.
Security, GRC and compliance teams, and the managers who answer to auditors and regulators.
11 free, editable files for a planned security awareness programme, with the five pieces of evidence auditors ask for.
13 free, editable files for an ISO/IEC 27001:2022 ISMS, from scope to management review, with a 93-control SoA and a NIST CSF 2.0 crosswalk.
One editable Word policy for devices, email, cloud, remote work and AI assistants, with a signed acknowledgement form.
A free video course that walks through the ISMS kit, template by template.
More plain-language articles on ISO/IEC 27001:2022 and NIST CSF 2.0.
NIST CSF 2.0 in plain terms: the six functions, what changed in version 2.0, and how an ISO/IEC 27001 ISMS answers it without a second control set.
Read the insightISO/IEC 27090:2026 gives guidance on AI-specific security threats. Here is how it differs from ISO/IEC 42001 and how to use the two together.
Read the insightISO 27001 implementation, step by step: the seven ISMS documents to build first, the order that works, and how risk, controls and evidence stay linked.
Read the insightOne practical insight, one regulatory update and one free tool, every two weeks. Free, and we never ask for your email.
Follow on LinkedIn
brivellis