Start here. These are free.

Two resources that get more use than anything else on this site. Download both. They cost nothing and take about 20 minutes to read.

Resource 1

Plain English Cheat Sheet

ISO 27001:2022 translated — every major clause explained in one or two sentences without standards-body language. Four pages. Print it. Keep it open next to the actual standard when you're reading. It changes the experience.

What's inside:
  • Clause 4 — Context: What it actually means for your company
  • Clause 5 — Leadership: What auditors look for in management commitment
  • Clause 6 — Planning: Risk assessment in plain language
  • Clauses 7–10 — The operational clauses, translated
  • Annex A — Control categories at a glance
First 30 Days

Your implementation roadmap

Day-by-day tasks from zero to fully operational ISMS. Click each week to expand.

Week 1

Foundation

4 tasks · 6 hours total
Day 1
Download ISO 27001:2022 standard
1 hr
Day 2
Read Clauses 4–10 (skim, don't deep dive)
2 hrs
Day 3
Run initial scoping meeting with IT lead + senior manager
1 hr
Day 4-5
Draft ISMS scope statement (1 page, no jargon)
2 hrs

Unlock the full roadmap: Download the PDF to see all 30 days, including Weeks 2-4 details, time estimates, and deliverable templates.

Week 2

Context & Stakeholders

4 tasks · 7 hours total
Week 3

Risk Assessment Setup

3 tasks · 7 hours total
Week 4

Policy & Governance

4 tasks · 8 hours total
...
Days 23-30 + Beyond

Weeks 5-12 cover risk treatment planning, control implementation, internal audits, and certification preparation. Download the full roadmap to see the complete 12-month timeline.

Download the full 30-day roadmap

Get the complete PDF with all 30 days, time estimates, deliverable templates, and the 12-month certification timeline.

These resources are a slice of what's in the full program. ISMS Accelerator includes 10 modules and 40+ templates covering everything from risk assessment to certification audit preparation.

See the full program →