Complete management system toolkits from someone who has spent years on the other side of the audit table. Editable Word and Excel, the registers and calculations already built, and every document ending with the questions an assessor will actually ask about it.
Each one is complete. There is no upsell, no core-plus-modules, and nothing held back for a second purchase.
The audit is booked and the system is not ready. The triage plan built on what actually decides audits, how to handle the auditor in the room, staff briefing cards, and the response kit for when findings land. Works with every ISO standard.
See the Survival Pack →The AI governance standard, and the established vendors still sell nothing for it. The impact assessment pack with a full worked example, an honest EU AI Act position, and the current BS EN ISO/IEC 42001:2026 designation throughout.
See the 42001 Toolkit →Written to the sixth edition, not the 2015 one. The complete quality management system: six policies including the new quality culture and ethics policy, the manual with its clause map, eighteen procedures, twelve forms, the audit checklist, guide, dictionary and a transition annex.
The one customers ask for by name in security questionnaires. Twelve policies, the ISMS manual, eighteen procedures, twelve forms, the Annex A implementation guide covering all 93 controls, and a workbook whose Statement of Applicability is generated from the same data as the guide, so the two can never disagree.
Written to the 2025 edition, which made the standard stand-alone: you no longer need ISO 27001 first. Nine privacy policies, the PIMS manual covering all eleven clauses, fifteen procedures, sixteen forms, a transition annex from the 2019 edition, and the largest workbook in the range.
The AI governance standard, and nobody else in the UK has written a proper toolkit for it: the big names still sell nothing. Ten policies, the AIMS manual, sixteen procedures, the AI system impact assessment pack with a full worked example, and an honest EU AI Act reality check no competitor would dare publish.
Both complete toolkits plus an integration guide written for this exact pairing: which six clauses you only build once, why the two clause 8s must never be merged, and the combined management review agenda that satisfies both standards in one meeting.
The closest pairing in the range: the privacy standard borrows its shared controls from the security one, so much of your ISMS evidence already answers your privacy system. Both complete toolkits plus the integration guide that maps it.
Both complete toolkits, plus the integration guide, at £134 less than buying them separately. For anyone holding one standard and being asked for the second, or building both at once.
The complete occupational health and safety management system. Policies, appointments, manual, eighteen procedures, assessments, permits, inspection checklists, the contractor and CDM pack, audit forms, guide and dictionary.
The complete environmental management system. Six policies, the EMS manual with its clause map, seventeen procedures, audit and review forms, the internal audit checklist, guide, dictionary and an eleven-sheet register workbook.
The site paperwork that actually gets asked for. Five permits to work, twelve inspection checklists, six assessment templates, the contractor and CDM pack and site records. No management system, and no intention of certifying.
For the person with an audit weeks away and a system that is not ready. The triage plan built on what actually decides audits, how to handle the auditor in the room, staff briefing cards, and the response kit for when findings land. Works with 9001, 14001, 45001, 27001, 27701 and 42001.
Already certified and wondering what the sixth edition actually means for you. The gap analysis, the plan, and a straight answer about what has not changed.
The internal audit clause 9.2 requires, without inventing the checklist from scratch. Clause by clause, with what an assessor actually looks for.
One spine, several sets of ribs. What genuinely merges when you hold more than one standard, what has to stay separate, and the twelve-month audit programme that covers all of them at once.
Fifty plain questions about what your business does, scored against thirty-three standards, with your answer and your build order on screen the moment you finish. Most businesses come out with two or three, not ten. Some come out with none, which is also a useful answer.
ISO 42001, ISO 27001 and ISO 27701 have all shipped from this queue in the last week. One remains, and if you need it sooner, saying so genuinely moves it up.
Business continuity. For organisations with contractual uptime obligations, or where a week offline would seriously damage the business.
Tell me when it is ready →