ISO/IEC 27001:2022 Document Kits

The ISO 27001 Document Kits by KLS Academy PLT provide a structured set of ready-to-use documents to support organizations in implementing and achieving ISO/IEC 27001:2022 Information Security Management System (ISMS) certification. This package includes 55 essential documents, categorized into four levels.

The document kits comprise general templates. If your organization requires further customization based on your business processes, activities, scope, and context, you may Request for Quotation by contacting us at hello@kls-academy.com.

The document kit is structured into four levels for clarity, ease of implementation, and compliance assurance:

4 Levels of Documentation Structure

Level 1: Manual (7 Files)

1. Information Security Management System Manual
2. ISMS Policy
3. ISMS Objectives
4. Internal and External Issues Register
5. Needs and Expectations of Interested Parties Register
6. Roles & Responsibilities of ISMS Steering Committee
7. Process Mapping

Level 2: Mandatory Procedures (13 Files)

1. Procedure for Management Review
2. Procedure for Documented Information Control
3. Procedure for Corrective Action
4. Procedure for Control of Record
5. Procedure for Information Security Management System Internal Audit
6. Procedure for Control of Nonconformity and Improvement
7. Procedure for Personnel and Training
8. Procedure for ISMS Implementation
9. Procedure for Risk Assessment and Risk Treatment
10. Procedure for Communication & Operational Management
11. Procedure for Access Control
12. Procedure for Business Continuity Management Planning
13. Procedure for ISMS Change Management

Level 2: Standard Operating Procedures (SOP) (5 Files)

1. SOP for Group Internet and E-mail Usage
2. SOP for the Handling of Virus Attacks
3. SOP for Information Security Incident Management
4. SOP for Audit Trails
5. SOP for Business Continuity Plan

Level 3: Work Instructions (6 Files)

1. Work Instruction for User Account Creation & Deactivation
2. Work Instruction for Password Management
3. Work Instruction for Media Disposal & Scrap Handling
4. Work Instruction for Backup & Data Restoration
5. Work Instruction for Incident Reporting & Escalation
6. Work Instruction for Document Versioning & Distribution

Level 4: Forms and Checklists (25 Files)

1. Visitor Entry Register
2. Employee Leaving/Transfer/Termination Checklist
3. Job Description and Specification
4. Training Calendar
5. Employees Competence Report
6. Induction Training Report
7. Training Report
8. Skills Matrix Sheet
9. Approved Supplier List
10. Customer Complaint Report
11. Customer Feedback Form
12. Minutes of Meeting
13. Risk Assessment and Treatment Plan
14. Security Incident Investigation Form
15. Business Continuity Test Report
16. ISMS Objective Monitoring Report
17. Statement of Applicability (SoA) Report
18. Corrective Action Report
19. Master List of Records
20. Audit Plan / Program
21. ISMS Internal Audit NCR Report
22. ISO/IEC 27001:2022 Audit Checklist Report
23. Continual Improvement Monitoring Log
24. Change Management Request Form
25. Communication Report