The register
Every unit, its requirement, guidance lens, evidence and auditor probe, formatted for a working file or a printed pack.
This is a labelled specimen, not the paid file. It shows the columns and the shape. The paid kit carries all 123 units and 671 evidence lines.
| Code | Title | Requirement, first line | Evidence | Owner | Status | Due |
|---|---|---|---|---|---|---|
| 4.3 | Determining the scope of the ISMS | The scope is a set of decisions about boundaries, applicability and interfaces. | Scope statement, interfaces, exclusions | [owner] | Open | [date] |
| 6.1.3 | Information security risk treatment | Treatment produces a plan and a Statement of Applicability. | Treatment plan, SoA, residual acceptance | [owner] | Open | [date] |
| A.5.23 | Information security for use of cloud services | Cloud use needs an acquisition and exit position. | Service inventory, shared responsibility, exit plan | [owner] | Open | [date] |
The four files
PDF
CSV
The rows
One row per unit, with the columns a team needs to assign an owner, set a status and record a due date.
XLSX
The workbook
The register, the evidence list and the plan, with filters and a column for the evidence pointer.
The specimen is illustrative. It is not a conformity record and it is not the official text. [owner], [status] and [date] are placeholders.