Procedures Library

What this set does

Policies say what. Standards say how much. Procedures say who, when and how. Auditors increasingly ask for the third one, and it is the part most organisations have never written down. This library gives you a procedure for every common control activity, in a consistent format with a control cross-reference, so you can assign owners and start collecting evidence.

What's inside

• 118 procedures covering access, change, vulnerability, logging, backup, incident, supplier, HR and physical controls
• Each procedure: purpose, trigger, roles, steps, frequency, records produced
• Control cross-reference to ISO 27002, CSF 2.0, 800-53 and SOC 2 TSC
• Procedure register with owner and review-date tracking
• Evidence catalogue: what to keep, where, and for how long

Who it is for

Teams that already have policies and standards but cannot show an auditor how the controls operate day to day.

How the documents are structured

Every document opens with its purpose, scope and owner, then the substantive content, then a control cross-reference showing which framework requirements it satisfies. Standards state requirements in testable language ("must", with the parameter). Procedures follow one format: trigger, roles, steps, frequency, records produced. Placeholders are limited to things only you can know: organisation name (which we fill in), system names, role titles, tool names and timelines. There are no "[insert policy here]" sections.

Tailoring effort

Expect to spend a few hours on a policies-and-standards set and longer on procedures, because procedures describe how your team actually works. The document register in each set lists every file with a suggested owner so you can split the work.

Included in these bundles

• ISO 27001 Certification Bundle — £1,595
• NIST CSF 2.0 Governance Bundle — £1,495

Licence

One purchase covers one organisation for internal use, with unlimited users and unlimited edits. Consultancies and MSPs tailoring documents for clients need the multi-client licence; see the terms or ask us.