The real ISO 28000:2022 documentation set: 137 documents and four Excel tools that form a complete security management system (SMS) for the supply chain. The Security Management System Manual meets every clause of ISO 28000:2022, and you get the security policy, 15 procedures, 7 work instructions, 52 forms each with a completed worked example, and the security risk, compliance, KPI and audit Excel tools, covering security risk assessment and treatment, threat and vulnerability assessment, security plans and response, access control, cargo and conveyance seal integrity, incident response and recovery, all editable in Word and Excel, so an organisation can secure its operations and supply chain and reach certification without hiring a consultant.
Preparing the documentation is the slowest and most confusing part of getting certified to ISO 28000:2022. You have to work out what the standard asks for, decide what to write, and turn it into a manual, procedures and records that an auditor will accept. Done from a blank page it takes months, and paying a consultant to do it can cost thousands.
The ISO 28000:2022 Documentation Toolkit gives you that whole system, already written and ready to edit. It is built by practitioners around the exact structure of the standard, so nothing an auditor expects is missing. You add your company details, adapt anything specific to your operation, and you have a complete, consistent security management system that is ready for audit. Every single document you receive is listed and explained further down this page, so you know precisely what you are buying before you spend anything.
The manual and 15 procedures follow ISO 28000:2022 clause by clause, from context, leadership and the security policy through security risk assessment, operational control, security plans and response to performance evaluation and improvement, so you certify against the current text of the security management system standard.
A security risk assessment and treatment procedure, a threat and vulnerability assessment worksheet, a risk assessment and treatment record, a risk treatment plan and a dedicated Excel risk register, with a risk-scoring work instruction, so security risk is identified, scored and treated exactly as ISO 28000 requires.
A conveyance 7-point inspection and seal log, a cargo seal integrity work instruction, an access control visitor and driver log, a security patrol guard tour log and an outsourced security provider evaluation, so the physical security of goods, vehicles and sites is controlled and evidenced.
A security plan template, a response team roster, a security incident report, an incident and event log and a post-incident review and recovery record, with procedures for security plans and response and a response activation work instruction, so incidents are handled with life safety first.
A legal and other requirements register, a compliance evaluation record, an internal audit programme, plan, checklist and report, and Excel compliance and audit trackers, so the management-system machinery an auditor expects is complete and working.
All 52 forms come with a matching sample filled form, worked around a realistic organisation, so you can see exactly how each security record should look before you complete your own.
Each tier answers a different question and is approved at a different level, and every requirement is owned in exactly one place.
No hidden contents and no vague claims. Here is the complete document set, with a short description of what each file is for and the clause it helps you meet.
A complete document set, fully editable in Microsoft Office.
The top-level document of the security management system. It demonstrates, clause by clause, how the organisation meets ISO 28000:2022, from context, leadership and the security policy through security risk assessment, operational control, security plans and incident response to performance evaluation and improvement, and traces each requirement to the procedure, work instruction, form, tool and record that satisfies it. This is the document an auditor opens first.
The writing is done. You edit instead of authoring from a blank page.
Get a professional system for a fraction of the cost of hiring one.
Mapped clause by clause so every requirement is covered.
Easy to read, easy to adapt, no jargon you have to decode.
Forms and registers capture exactly what an auditor asks to see.
A perpetual licence for your whole team, with free updates.
The full set arrives by email in minutes, in Word and Excel.
Swap the highlighted placeholders for your own company details.
Roll out the procedures and capture evidence on the forms.
Use the internal audit checklist and management review templates.
Face the auditor with a complete, consistent system.
Files sent securely within 24 working hours of payment.
Microsoft Word and Excel, with placeholders to fill in.
If the standard is revised, you get the update free.
One organisation, unlimited internal users, perpetual.
| What matters | From scratch | Hire a consultant | isofolder kit |
|---|---|---|---|
| Time to a full document set | Months | Weeks | The same day |
| Typical cost | Your time | Thousands | $149 once |
| Written by experts | No | Yes | Yes |
| Mapped to every clause | Risky | Usually | Yes |
| You keep full control | Yes | Limited | Yes, fully editable |
| Free updates on revision | No | Extra fee | Included |
isofolder is a team of auditing and consulting professionals with more than 80 years of combined experience. Our kits are written by practitioners and reviewed by working auditors, then refined across many real certification projects. When you buy from us, you are buying a system that has already helped companies pass their audits.
If you ever need a document that is specific to your operation and not already in the kit, our team will prepare it for you.
The documents were well structured and easy to adapt. We cleared our certification audit with no major findings.
Saved us weeks of writing. Everything was mapped to the clauses, so we knew nothing was missing.
Clear, professional and fully editable. Far better value than the consultant quotes we received.
Preview 10 real pages from the ISO 28000:2022 toolkit right here, including a full form and part of an actual procedure. Judge the quality and writing style for yourself, with no sign-up.
Download the complete, editable toolkit and start building an audit ready system in minutes, with a free sample available before you buy.