Practitioner-grade resources for the work that doesn’t belong in a slide deck, organized by where you are — from getting started to certification. Free to use, mapped to the ISO 27001:2022 clauses they support.
The workflow we use to run ISO 27001 on Claude, from evidence collection through to your readiness report. Built to auditor standard, with prompts you can copy straight in. Tell us where to send it and the PDF lands in your inbox.
Delivered straight to your inbox
Understand the standard, what changed in the 2022 edition and how it sits alongside other frameworks — before you commit time or budget.
How AuditLens uses an agentic stack to run ISO 27001 work end-to-end — the architecture, the guardrails, and how founders can put autonomous compliance agents to work without losing control.
Cloud sovereignty has shifted from a legal concept to a strategic control decision. In 2026, the question is no longer where data lives, but who decides when trust breaks.
A practical overview of the 2022 revision: control structure changes, risk alignment, and evidence expectations. Learn what to update in your program without disruption.
Know the basics? See where your organization stands today.
Measure your current posture against the 93 Annex A controls and the regulations around you, then decide what to fix first.
A founder-friendly atlas of all 93 ISO 27001:2022 Annex A controls — what each one really means, the evidence auditors expect, and the fastest path to coverage.
Break down NIS2 requirements into actionable priorities: governance, incident reporting, and vendor risk management. Ideal for teams building a plan.
How the updated NIST Cybersecurity Framework maps to ISO 27001 and what security teams should adjust in their control strategy.
Single-page printable checklist of all 93 Annex A controls grouped by theme — useful for kickoff workshops and gap-assessment sessions.
The fastest way to find your gaps is to assess them.
Policies, risks, suppliers and evidence — templates and workflows for the work between your first assessment and the audit.
Eight modular prompts that collect your ISO 27001 evidence for you. An orchestrator and five read-only sub-agents pull proof from AWS, Azure/GCP, GitHub, Google Workspace and Linear/Jira, map it to Annex A, score it for freshness, and write the gap report.
A step-by-step guide to collecting, validating, and organizing evidence so audits are faster and more predictable. Includes common pitfalls and how to avoid them.
A vendor risk playbook covering classification, due diligence, and ongoing monitoring. Learn how to stay compliant as your supplier base grows.
All 93 ISO 27001:2022 Annex A controls in a single sheet with inclusion / exclusion / justification columns and a versioning tab.
Risk inventory with threat / vulnerability / impact / likelihood / treatment / residual columns. Pre-populated with 30 starter risks.
CAIQ-Lite-style supplier assessment covering governance, IAM, encryption, incident response, sub-processors, and DPA basics.
Five core policies (information security, access control, incident response, asset management, supplier) pulled from the AuditLens policy library.
Start from your gaps, and bring in an expert when you need extra hands.
Prepare for Stage 1 and Stage 2, run your internal audit and keep controls healthy between surveillance audits.
Walk into your Stage 2 audit knowing exactly what happens. Sample auditor questions, evidence the assessor opens first, and a dry-run script to rehearse with your team.
Why continuous controls monitoring reduces audit stress and improves security posture year-round. A comparison of workflows, costs, and outcomes.
Audit program + findings + corrective actions template, structured for clause 9.2 evidence.
Week-by-week run-up to a Stage 1 / Stage 2 audit with owners, evidence, and verification steps.
Check you are audit-ready before you book, then choose an independent certification body.
We add resources monthly based on what real practitioners ask for. Two-line email is enough — we’ll come back with what we have or build the right one.
