ISO 27001, made simple
AI drafts your security policies, risk register and controls from everything it knows about your organisation. You review, approve and get audit-ready.
ISO 27001 is the international standard for an information security management system (ISMS): the policies, risks and controls that keep your data safe. Certification proves it to your customers.
- Annex A controls
- 93
- tailored policies
- 14
- place for your whole ISMS
- 1
How it works
From scope to continuous compliance
Add your organisation
Tell us who you are, and upload any policies you already have so we can build on them.
Map your scope
Add your locations, people, roles, assets and suppliers. Import devices and apps from Microsoft Intune.
Assess the controls
AI drafts an answer to every clause and Annex A question from your people, assets and suppliers. You review, amend and confirm.
Build your ISMS
AI turns everything you’ve captured into your Statement of Applicability, risk register and full policy pack.
Stay compliant
Track staff training and policy sign-offs, run internal audits and management reviews, and log incidents as you go.
Everything,
in one place
Your existing documents
Upload what you have. We compare it against each answer and flag conflicts and gaps.
Every clause and control
Questions covering clauses 4 to 10 and all 93 Annex A controls, with AI-drafted answers you check and confirm.
Statement of Applicability
A live register of every control, drafted with AI and exported to PDF whenever you need it.
Risk register
Risks drafted by AI from your assets, suppliers and obligations, linked to Annex A and your risk appetite.
Policy pack
14 policies written by AI for your organisation, from Access Control to Business Continuity, with versioning and approval.
Continuous compliance
Training records, policy acknowledgements, internal audits, management reviews and incidents, with evidence attached, so your ISMS stays current between audits.
Common questions
- What is ISO 27001?
- ISO/IEC 27001 is the international standard for an information security management system (ISMS). It sets out how to find your security risks, choose controls to manage them and keep improving over time. Certification is often required for larger contracts and regulated supply chains. We support the current version, ISO/IEC 27001:2022.
- Does ComplySmart certify me for ISO 27001?
- No. ISO 27001 is certified by a UKAS-accredited certification body after an external audit. We get you ready for that audit and keep your ISMS in shape afterwards.
- Do I have to accept what the AI drafts?
- No, and you shouldn’t accept it without checking. Every answer and document starts as a draft for you to review and approve. Nothing counts as done until a person confirms it.
- Already have Cyber Essentials?
- Good start. ISO 27001 sits in the same ComplySmart account, so your organisation details and asset register are already there.
Get audit-ready
and stay that way.
ISO 27001 is rolling out to a small group of organisations first. Book a call with our Sales Manager to see it in action and find out if it’s right for you.
Book a call with our Sales Manager(opens in a new tab)