Labelled sample
Five rows from the kit, shown as a specimen.
This is a specimen, not the product. It shows five of the 71 rows so you can see the shape of the register before you buy. The full kit adds the evidence list, the dated plan, the crosswalk and the five-sheet workbook.
Specimen
Rows are real record rows. The owner and date columns are blank in the sample because they are yours to fill.
Specimen, not the full kit
| Clause | Title | What the record says | Draft treatment | Evidence |
|---|---|---|---|---|
| 5.5.2 | Defining the objectives, scope and criteria | Criteria name the SoA version, the risk process and the policies | Re-referenced to 27001:2022 | Audit plan, criteria list, SoA extract |
| 6.4.7 | Collecting and verifying information | Information is sampled and verified; only verified information is evidence | Re-referenced | Evidence record with source, date, method |
| 7.2.3 | Knowledge and skills | Competence covers generic, ISMS discipline and sector knowledge | Aligned with 19011:2026 | Competence matrix, audit feedback |
| A.3.1.2 | Information security risk assessment | Sample similar risks and test consistency and ownership | Remapped from 2013 to 2022 | Risk criteria, sampled assessments |
| A.7.2 | Continual improvement | The 2022 edition moves continual improvement to 10.1 | Renumbered | Improvement record and evidence |
The sample is generated from the same record as the paid files. It is labelled a specimen here and in the PDF and CSV. The full kit is USD 799 one off.