Last updated: 2026-09-27 · We recommend a pack we do not sell
ISO 27001 implementation toolkit
If you searched for an ISO 27001 toolkit, you almost certainly want a document pack and a project plan, not another SaaS pitch. We do not sell that pack. GRC Lab does. This page used to pretend otherwise. It does not anymore.
The short version
GRC Lab's ISO 27001 toolkit now ships with their ISO/IEC 27001 Lead Implementer course (re-checked 2026-09-27): 12 hours of video across a 12-step roadmap, a project plan broken into 400+ tasks with owners and milestones, and ready-to-use templates (policies, risk register, Statement of Applicability and more) to download and adapt, with TRECCERT exam prep included. Their page no longer sells it as a standalone one-time purchase with lifetime access, so we no longer repeat those claims. ISMS Copilot is the specialist AI plus free working aids (gap checker, Annex A finder, Statement of Applicability starter). Use the pack for starting documents. Use us to draft, check, and question the system around them.
The document pack: GRC Lab ISO 27001 Toolkit (ships with the Lead Implementer course)
Everything in this section is taken from GRC Lab's public product page, last checked 2026-09-27. If their page and this one ever disagree, theirs wins.
Course
Their public page (checked 2026-09-27) describes 12 hours of video across the full 12-step roadmap, from scoping to the certification audit, with practical exercises and working documents at every step, and TRECCERT exam prep included.
Toolkit
The same page describes the ISO 27001 Toolkit as every document built in the lessons: policies, risk register, Statement of Applicability and more, ready to download and adapt to your own ISMS. That is all we repeat. Open their page for anything else.
Project plan
Their curriculum describes a 12-step roadmap turned into action with over 400 tasks with owners and milestones, so progress is visible. This replaces the 400-plus-task plan claim we carried when the toolkit was a standalone product; the number survives, the packaging changed.
What we no longer claim
Their page no longer describes a standalone one-time purchase with lifetime access, a free template preview, or bonus mappings to NIST CSF and NIST SP 800-53. Those claims came from the earlier standalone product, so they are gone from here too. Pricing today is a monthly membership or a one-time certification bundle on their page; we do not quote their price here.
What we are, next to that pack
This URL used to list "93 policy templates" and "save thousands vs consulting firms" as if ISMS Copilot were the pack. That was wrong. The honest split is below.
Free ISO 27001 gap checker
Self-score clauses 4 to 10. A first-pass heatmap, not a certification audit and not a document pack.
Annex A control finder
All 93 Annex A:2022 controls with original plain-English summaries and export. Control numbers only, no official ISO titles.
Statement of Applicability starter
A starter SoA over the 93 controls (applicable / excluded / partial plus a justification). You still write the real one.
How to run a gap analysis
The vendor-neutral seven-step method that sits under the checker.
ISO 27001 assistant
Specialist chat for policies, risks, SoA wording, and audit prep.
The sibling toolkit
The ISO 42001 sibling: the pack we recommended there is no longer published, and that page records what changed. Our readiness checker sits beside it. ISO 42001 documentation toolkit. More on GRC Lab: courses and resources we recommend.
Questions
- Does ISMS Copilot include 93 policy templates?
- No. That claim used to appear on this page and it was wrong. We do not sell a 93-template pack. GRC Lab's toolkit is the document pack we recommend. Our Annex A finder lists the 93 control numbers with original summaries. That is a reference aid, not 93 policies.
- Do you earn a commission if I buy the GRC Lab toolkit?
- No. Independent recommendation, no paid or affiliate arrangement on this link. The price on GRC Lab is the same as going there directly.
- What is the difference between the toolkit and ISMS Copilot?
- The toolkit is starting documents and a project structure. ISMS Copilot is a specialist AI plus free working aids (gap checker, Annex A finder, SoA starter). Most teams use a pack and an assistant for different jobs.
- Is the GRC Lab toolkit a substitute for a consultant or a certifier?
- No. A course-shipped toolkit and templates help you build the system; a certification body still has to audit you. A pack does not make you certified.
- Where do I see the current contents and price?
- On GRC Lab's ISO 27001 page. We re-checked it on 27 September 2026: the toolkit now ships with the Lead Implementer course rather than as a standalone one-time pack. We do not quote their price here.
Sources (checked 2026-09-27)
- GRC Lab, ISO 27001 toolkit page (live; product now ships with the ISO/IEC 27001 Lead Implementer course, contents re-checked 2026-09-27)
- GRC Lab site root and sitemap (the ISO/IEC 42001 Project Toolkit sibling page is no longer published; checked 2026-09-27)
- ISMS Copilot partners: GRC Lab courses and resources (independent, no commission)
GRC Lab is an independent company founded by Aron Lange. We recommend the toolkit because we rate the work. There is no paid or affiliate arrangement on these links. We do not quote their price.