The complete ISO 9001 and ISO 27001 toolkits together, with a purpose-written guide to running them as one system: one context, one audit programme, one management review, one supplier register, and two certificates from one audit visit.
Quality wins the tender and security passes the questionnaire, which is why this pairing keeps appearing in the same procurement pack. Run as two separate systems it is double the work forever. Run as one, six of the ten clauses are built once.
The full £365 product: 154 pages, eight files and the fifteen-sheet workbook, written to the sixth edition with the transition annex. Nothing removed.
The full £465 product: 132 pages, nine files and the sixteen-sheet workbook with the 93-row Statement of Applicability. Nothing removed.
What you only build once: context, leadership, objectives, competence, document control, audit and review. What must stay separate, and why the two clause 8s share a number and nothing else. The combined management review agenda covering every required input of both standards. The twelve-step build order, and what to ask your certification body so one audit visit produces two certificates.
Not a summary. The actual questions an assessor puts about that document, and what to put in front of them. You will not find this in a template bundle, because template bundles are not written by people who have sat in the assessor’s chair.
Certification does not make you legally compliant, and the two are routinely confused. The statutory duties are mapped next to the clauses so neither is being satisfied by accident.
Every document carries a phase number in its header, from appoint through to learn. If you are lost, look at the header of whatever is in front of you and you know where you are.
Where a document must be produced by a competent specialist, such as a fire risk assessment, asbestos survey, legionella or health surveillance, the toolkit says so, explains how to commission one, and tells you how to judge whether what you were handed is any good. Selling you a template for those would be worse than selling you nothing.
Organisations facing both demands at once, which increasingly means anyone selling software or services into larger customers: quality for the contract, security for the questionnaire. Also anyone holding one certificate whose customers have started asking for the other.
Drafted for the United Kingdom with notes for Scotland and Northern Ireland, and structured so that the management system requirements carry across unchanged to any jurisdiction. Outside the UK you would replace the legal register entries with your own obligations; everything else holds.
Fully editable Microsoft Word and Excel in one zip. Every placeholder is in [SQUARE BRACKETS] so you can see at a glance what needs your input. Every guidance box is shaded so you know what to delete before you issue the document.
You may use, edit, adapt and rebrand everything within your own organisation, on as many sites and for as many people as you employ, and give completed copies to your certification body, assessor, clients, insurer or regulator.
You may not resell, share or distribute the blank toolkit outside your organisation, or repackage it as your own product.