Free ISO 27001 starter kit.
An implementation checklist covering every clause and all 93 Annex A controls, the core ISMS documents, and a plain-English guide for startups and SMBs. Editable Word and Excel files.
For founders, CTOs and first security hires at startups and SMBs who've been asked for ISO 27001 and want a structured, honest place to start.
- ✓Correct ISO 27001:2022 numbering throughout
- ✓Statement of Applicability and risk register in Excel
- ✓A 90-day roadmap
Get the free kit
Killswitch emails you a confirmation link. After you confirm, the members page has the kit.
Killswitch emails a confirmation link. After you confirm, you become a free member of Killswitch, and you can open the members page that has the kit download. You can unsubscribe from Killswitch emails at any time. This form has no newsletter checkbox. See the privacy notice.
What's inside
Replace [Company Name], follow the roadmap, and keep everything.
ISO 27001:2022 Implementation Checklist
Excel and printable PDF.
- • Clauses 4–10 (30 line items) and all 93 Annex A controls, with correct 2022 numbering
- • For every line: what to do in plain English, evidence to collect, suggested owner, phase and status
- • A 90-day roadmap and a summary that updates as you go
Core ISMS documents
Word and Excel, each with placeholders and a version, owner and approval header.
- • ISMS Scope Statement, Information Security Policy, Security Objectives
- • Risk Assessment and Treatment Methodology, Risk Register, Risk Treatment Plan
- • Statement of Applicability (all 93 controls)
- • Document Control, Internal Audit procedure and checklist, Management Review, Corrective Action procedure and log, Competence and Awareness record
How to Use This Kit
A PDF guide for startups and SMBs.
- • ISO 27001 in ten minutes
- • The 90-day plan, step by step
- • How to fill in each document, and what auditors look for as evidence
- • Your first week, plus a glossary
Questions
Is it really free?
Yes. Enter your email in the Killswitch form. Killswitch emails a confirmation link. After you confirm, you are a free member and can open the members page that has the kit.
Will this get us certified?
No kit can guarantee that. Certification is decided by an accredited certification body based on evidence that your ISMS operates. The kit gives you the structure, documents and checklist to build that ISMS.
Do I still need the ISO 27001 standard?
We recommend buying it from ISO or your national standards body. The kit paraphrases requirements and references clause and control numbers; it doesn't reproduce the standard.
Can I share it or use it for clients?
The kit is licensed for use within your own organization. You can share completed documents with your auditors and customers. Please don't rebrand it, resell it, redistribute it or use it for client work; colleagues elsewhere can download their own free copy.
What happens after I sign up?
Killswitch emails a confirmation link. After you confirm, you are a free member of the Killswitch site. The kit download is on a members-only page there. Killswitch emails include an unsubscribe link. This form has no newsletter checkbox.
Rather have it done with you?
Our Audit Ready Sprint takes one framework (ISO 27001 or SOC 2) to audit-ready in 45 days for a fixed $12,900 service fee plus a GRCompliance license. The certification audit is billed separately by your certification body. Prefer to explore first? Try the live demo, or install the community edition free from GitHub (self-hosted).
See the Audit Ready Sprint