Last updated: 2026-08-12 · We recommend a pack we do not sell
ISO 27001 implementation toolkit
If you searched for an ISO 27001 toolkit, you almost certainly want a document pack and a project plan, not another SaaS pitch. We do not sell that pack. GRC Lab does. This page used to pretend otherwise. It does not anymore.
The short version
GRC Lab's ISO/IEC 27001 Lead Implementer Toolkit is the document pack: a 12-step project plan, pre-built templates for policies, processes and records, and bonus mappings to NIST CSF and NIST SP 800-53. We recommend it. ISMS Copilot is the specialist AI plus free working aids (gap checker, Annex A finder, Statement of Applicability starter). Use the pack for starting documents. Use us to draft, check, and question the system around them.
The document pack: GRC Lab ISO/IEC 27001 Lead Implementer Toolkit
Everything in this section is taken from GRC Lab's public product page, last checked 2026-08-12. If their page and this one ever disagree, theirs wins.
Project plan
Their public page describes a customisable project plan for implementing an ISMS against ISO/IEC 27001, structured as a 12-step / 12-stage approach with tasks and milestones. Their own description (checked 2026-08-12) also calls out a 400-plus task plan.
Templates
Pre-built templates for policies, processes and records, offered as a starting point you adapt. They also advertise a free preview of the templates before purchase. We do not host those files.
Bonus mappings
The same public page includes bonus resources that map ISO 27001 to NIST CSF and NIST SP 800-53. Useful if you already run those frameworks. Confirm the current set on their page.
Who built it
Aron Lange, founder of GRC Lab. Public credentials he states: CISM, CISA, CRISC, CGEIT, ISO 27001 Lead Auditor. One-time purchase with lifetime access on their page. We do not quote a price here because it may change.
What we are, next to that pack
This URL used to list "93 policy templates" and "save thousands vs consulting firms" as if ISMS Copilot were the pack. That was wrong. The honest split is below.
Free ISO 27001 gap checker
Self-score clauses 4 to 10. A first-pass heatmap, not a certification audit and not a document pack.
Annex A control finder
All 93 Annex A:2022 controls with original plain-English summaries and export. Control numbers only, no official ISO titles.
Statement of Applicability starter
A starter SoA over the 93 controls (applicable / excluded / partial plus a justification). You still write the real one.
How to run a gap analysis
The vendor-neutral seven-step method that sits under the checker.
ISO 27001 assistant
Specialist chat for policies, risks, SoA wording, and audit prep.
The sibling toolkit
Same shape for ISO 42001: GRC Lab's Project Toolkit is the pack. Our readiness checker sits beside it. ISO 42001 documentation toolkit. More on GRC Lab: courses and resources we recommend.
Questions
- Does ISMS Copilot include 93 policy templates?
- No. That claim used to appear on this page and it was wrong. We do not sell a 93-template pack. GRC Lab's toolkit is the document pack we recommend. Our Annex A finder lists the 93 control numbers with original summaries. That is a reference aid, not 93 policies.
- Do you earn a commission if I buy the GRC Lab toolkit?
- No. Independent recommendation, no paid or affiliate arrangement on this link. The price on GRC Lab is the same as going there directly.
- What is the difference between the toolkit and ISMS Copilot?
- The toolkit is starting documents and a project structure. ISMS Copilot is a specialist AI plus free working aids (gap checker, Annex A finder, SoA starter). Most teams use a pack and an assistant for different jobs.
- Is the GRC Lab toolkit a substitute for a consultant or a certifier?
- No. Their page positions it as a way to start without a consultant. A certification body still has to audit you. A pack does not make you certified.
- Where do I see the current contents and price?
- On GRC Lab's ISO 27001 toolkit page. We checked it on 12 August 2026. We do not quote their price here.
Sources (checked 2026-08-12)
- GRC Lab, ISO/IEC 27001 Lead Implementer Toolkit (live product page; title, description, project-plan / templates / NIST-mapping claims checked 2026-08-12)
- GRC Lab, ISO/IEC 42001 Project Toolkit (sibling pack; checked 2026-08-12)
- ISMS Copilot partners: GRC Lab courses and resources (independent, no commission)
GRC Lab is an independent company founded by Aron Lange. We recommend the toolkit because we rate the work. There is no paid or affiliate arrangement on these links. We do not quote their price.