Use cases, with the right clauses on the page
Browse 36 workflow-specific guides — each anchored to a real activity and (where it matters) a specific framework, so the clauses, deliverables and citations are already on the page when you land.
- Internal audit
- 7
- Gap analysis
- 5
- Other
- 4
Showing all 36 use cases.
- Other
Document consistency
Ensure consistent terminology, formatting, and quality across all compliance documentation.
Read → - Evidence collectionDORA
DORA evidence collection with ISMS Copilot
Make the Register of Information the backbone of your DORA evidence — plus TLPT results and incident classification records.
Read → - Risk assessmentDORA
DORA ICT risk assessment with ISMS Copilot
Build the Article 6 ICT risk-management framework and document concentration risk with AI assistance.
Read → - Internal auditDORA
DORA internal audit with ISMS Copilot
Audit the Article 6 ICT risk-management framework and the Register of Information.
Read → - Risk assessmentEU AI Act
EU AI Act risk assessment with ISMS Copilot
Classify your AI system, run the Article 9 risk-management system, and prepare a fundamental-rights impact assessment.
Read → - Internal auditGDPR
GDPR internal audit with ISMS Copilot
Audit your Article 30 ROPA, Article 35 DPIAs, and Article 5(2) accountability evidence.
Read → - Policy generationGDPR
GDPR policy and notice generation with ISMS Copilot
Draft Article 13 and 14 privacy notices, the Article 30 ROPA, and a defensible retention schedule.
Read → - Framework mappingGDPRCCPA / CPRA
GDPR to CCPA / CPRA framework mapping
Run one privacy programme that satisfies both EU and California obligations.
Read → - Gap analysisHIPAA
HIPAA gap analysis with ISMS Copilot
Run a HIPAA Security Rule gap analysis and §164.308(a)(1) risk analysis — without putting PHI in chats.
Read → - Policy generationHIPAA
HIPAA policy generation with ISMS Copilot
Draft your 45 CFR §164.316 policy pack and Notice of Privacy Practices without exposing PHI.
Read → - Internal audit
Internal audits with ISMS Copilot
Run thorough internal audits in less time with AI-assisted gap analysis.
Read → - Evidence collectionISO 27001
ISO 27001 evidence collection with ISMS Copilot
Build the evidence package for the certification audit — Annex A operating effectiveness plus clause 9 records.
Read → - Gap analysisISO 27001
ISO 27001 gap analysis with ISMS Copilot
Map your current state against ISO 27001:2022 clause 4-10 and all 93 Annex A controls.
Read → - Internal auditISO 27001
ISO 27001 internal audit with ISMS Copilot
Plan and run the clause 9.2 internal audit programme with AI-assisted control sampling.
Read → - Policy generationISO 27001
ISO 27001 policy generation with ISMS Copilot
Generate the Annex A:2022 policy set and the clause 5.2 information security policy with framework-accurate drafting.
Read → - Risk assessmentISO 27001
ISO 27001 risk assessment with ISMS Copilot
Run a clause 6.1.2 risk assessment that flows into risk treatment and a justified Statement of Applicability.
Read → - SoA generationISO 27001
ISO 27001 Statement of Applicability generation
Produce a defensible SoA that satisfies clause 6.1.3 d) with justified inclusions and exclusions.
Read → - Framework mappingISO 27001NIS 2
ISO 27001 to NIS 2 framework mapping
Use your ISO 27001 ISMS as the implementation pathway for NIS 2 Article 21.
Read → - Framework mappingISO 27001SOC 2
ISO 27001 to SOC 2 framework mapping with ISMS Copilot
Crosswalk Annex A controls to the Trust Services Criteria — implement once, report many.
Read → - Gap analysisISO 42001
ISO 42001 gap analysis with ISMS Copilot
Layer an AI Management System onto your existing ISO 27001 ISMS without rebuilding it.
Read → - Internal auditISO 42001
ISO 42001 internal audit with ISMS Copilot
Run the clause 9.2 internal audit of your AI management system and its Annex A controls.
Read → - Other
Multi-framework compliance
Manage ISO 27001, SOC 2, NIS 2, and more from a single AI assistant.
Read → - Evidence collectionNIS 2
NIS 2 evidence collection with ISMS Copilot
Evidence your Article 21 risk-management measures and Article 23 incident records for the competent authority.
Read → - Gap analysisNIS 2
NIS 2 gap analysis with ISMS Copilot
Settle essential-versus-important scoping, then run an Article 21 measure-by-measure delta.
Read → - Internal auditNIS 2
NIS 2 internal audit with ISMS Copilot
Self-audit your Article 21 cybersecurity risk-management measures against the directive.
Read → - Risk assessmentNIST CSF
NIST CSF 2.0 risk assessment with ISMS Copilot
Run risk assessment through the CSF 2.0 ID.RA outcomes, build Current and Target Profiles, and pick a Tier.
Read → - Framework mappingNIST CSFISO 27001
NIST CSF 2.0 to ISO 27001 framework mapping
Connect outcome-based CSF subcategories to implementable Annex A controls.
Read → - Auditor onboarding
Onboard junior auditors
Get new team members audit-ready faster with AI-guided compliance training.
Read → - Auditor onboardingISO 27001
Onboarding junior ISO 27001 auditors
Bring new auditors up to clause-by-clause competence faster, without diluting independence.
Read → - Auditor onboardingSOC 2
Onboarding junior SOC 2 associates
Get new associates productive on TSC walkthroughs and workpapers without weakening engagement standards.
Read → - Evidence collectionSOC 2
SOC 2 evidence collection with ISMS Copilot
Assemble Type 2 evidence across the full review period — organized by Trust Services Criterion.
Read → - Gap analysisSOC 2
SOC 2 gap analysis with ISMS Copilot
Close Trust Service Criteria points-of-focus gaps before the readiness assessment.
Read → - Internal auditSOC 2
SOC 2 internal audit with ISMS Copilot
Dry-run the SOC 2 examination and test control narratives before the CPA firm arrives.
Read → - Policy generationSOC 2
SOC 2 policy generation with ISMS Copilot
Build a Trust Service Criteria-aligned policy pack with explicit control-to-policy traceability.
Read → - OtherISO 27001
Tools for ISO 27001 Controls
Navigate the ISO 27001 control landscape with the right technology stack.
Read → - Other
Train Your AI Compliance Assistants
Customize ISMS Copilot with your organization's specific policies and context.
Read →