The real ISO 31000:2018 documentation set: 69 documents and three Excel tools that build a complete risk management framework and process. The Risk Management Framework Manual follows the ISO 31000:2018 principles, framework and process, and you get the risk management policy, 9 procedures, 5 work instructions, 25 forms each with a completed worked example, and the enterprise risk register, treatment tracker and framework maturity Excel tools, covering context and commitment, roles and resources, communication and consultation, risk assessment (identification, analysis and evaluation), risk treatment and the monitoring, review and reporting of risk, all editable in Word and Excel. ISO 31000 is a guidance standard and is not certifiable, so this toolkit is built to embed risk management across the organisation and to provide the risk-based thinking that certifiable standards such as ISO 9001, ISO 27001 and ISO 45001 require.
Preparing the documentation is the slowest and most confusing part of getting certified to ISO 31000:2018. You have to work out what the standard asks for, decide what to write, and turn it into a manual, procedures and records that an auditor will accept. Done from a blank page it takes months, and paying a consultant to do it can cost thousands.
The ISO 31000:2018 Documentation Toolkit gives you that whole system, already written and ready to edit. It is built by practitioners around the exact structure of the standard, so nothing an auditor expects is missing. You add your company details, adapt anything specific to your operation, and you have a complete, consistent risk management system that is ready for audit. Every single document you receive is listed and explained further down this page, so you know precisely what you are buying before you spend anything.
The manual and procedures follow the three parts of ISO 31000:2018, the principles, the framework and the process, so risk management is designed, integrated and implemented the way the standard describes, from leadership and commitment through to evaluation and improvement of the framework.
Procedures and forms for scope, context and criteria, risk assessment (identification, analysis and evaluation), risk treatment, and monitoring, review, recording and reporting, so the ISO 31000 process is run consistently across every risk you manage.
A risk identification worksheet, a 5x5 scoring work instruction, a risk analysis and scoring record, an evaluation and prioritisation record and a facilitation guide for risk workshops, so teams can actually run assessments rather than just read about them.
An Excel enterprise risk register, a risk treatment action tracker and a framework maturity self-assessment, plus a risk treatment option evaluation, treatment plan and residual risk acceptance record, so risks are tracked from identification to accepted residual level.
A risk monitoring and review schedule, review meeting minutes, a risk report and dashboard and a key risk indicator (KRI) monitoring record, so risk information reaches decision makers in a form they can act on.
All 25 forms come with a matching sample filled form, worked around a realistic organisation, so you can see exactly how each risk record should look before you complete your own.
Each tier answers a different question and is approved at a different level, and every requirement is owned in exactly one place.
No hidden contents and no vague claims. Here is the complete document set, with a short description of what each file is for and the clause it helps you meet.
A complete document set, fully editable in Microsoft Office.
The top-level document of the risk management framework. It sets out, in line with ISO 31000:2018, the principles of risk management, the framework by which risk management is led, integrated, designed, implemented, evaluated and improved, and the risk management process applied to individual risks, and traces each part of the standard to the procedure, work instruction, form, tool and record that supports it. This is the document that anchors the whole risk toolkit.
The writing is done. You edit instead of authoring from a blank page.
Get a professional system for a fraction of the cost of hiring one.
Mapped clause by clause so every requirement is covered.
Easy to read, easy to adapt, no jargon you have to decode.
Forms and registers capture exactly what an auditor asks to see.
A perpetual licence for your whole team, with free updates.
The full set arrives by email in minutes, in Word and Excel.
Swap the highlighted placeholders for your own company details.
Roll out the procedures and capture evidence on the forms.
Use the internal audit checklist and management review templates.
Face the auditor with a complete, consistent system.
Files sent securely within 24 working hours of payment.
Microsoft Word and Excel, with placeholders to fill in.
If the standard is revised, you get the update free.
One organisation, unlimited internal users, perpetual.
| What matters | From scratch | Hire a consultant | isofolder kit |
|---|---|---|---|
| Time to a full document set | Months | Weeks | The same day |
| Typical cost | Your time | Thousands | $149 once |
| Written by experts | No | Yes | Yes |
| Mapped to every clause | Risky | Usually | Yes |
| You keep full control | Yes | Limited | Yes, fully editable |
| Free updates on revision | No | Extra fee | Included |
isofolder is a team of auditing and consulting professionals with more than 80 years of combined experience. Our kits are written by practitioners and reviewed by working auditors, then refined across many real certification projects. When you buy from us, you are buying a system that has already helped companies pass their audits.
If you ever need a document that is specific to your operation and not already in the kit, our team will prepare it for you.
The documents were well structured and easy to adapt. We cleared our certification audit with no major findings.
Saved us weeks of writing. Everything was mapped to the clauses, so we knew nothing was missing.
Clear, professional and fully editable. Far better value than the consultant quotes we received.
Preview 10 real pages from the ISO 31000:2018 toolkit right here, including a full form and part of an actual procedure. Judge the quality and writing style for yourself, with no sign-up.
Download the complete, editable toolkit and start building an audit ready system in minutes, with a free sample available before you buy.