The ISO/IEC 27001 readiness your customers ask for
QuickISO is a workspace for ISO/IEC 27001 scope, gaps, owned actions, approved documents and fresh evidence before an independent certification audit.
- ISO/IEC 27001 and ISO/IEC 42001
- KSC (NIS2)
- EU workspace
- English, Polish
DRAFT: requires review
Access control policy
Version 0.1Policy owner: Anna Kowalska
For tech companies of 10 to 250 people in the EU and US.
For technology companies that sell to demanding customers
- A tender asks for ISO/IEC 27001.Statement of applicability
- A bank sends its suppliers a security questionnaire.Customer questionnaires
- A client on the KSC register asks how you secure what you supply.KSC (NIS2)
- A consultant runs the system for several client companies.Portfolio
Everything that usually lives in spreadsheets and shared drives
Scope and gap assessment
Agree what the management system covers and see where you stand. “I don’t know” stays visible as an open question, not a gap.
A.5.17A.8.5
What share of the organization's business systems (email, cloud consoles, code repositories, finance, HR and remote access) require multi-factor authentication for every user?
- None
- Under a quarter
- About half
- Most
- All
- I don’t know
ClarificationDue 14 November
Ask IT for the identity provider's multi-factor authentication report or the list of systems that do not use single sign-on.
A clarification task was created so that someone can find the answer.Owners and due dates
Turn gaps into actions with a named owner and a due date instead of a list nobody updates.
Review access to production systems
The owner gets an email in their own interface language.A.5.18
Anna Kowalska
14 December
Planned
Ask IT for the identity provider's multi-factor authentication report or the list of systems that do not use single sign-on.
Clarification
A.5.17A.8.5
Tomasz Dubiel
14 November
In progress
Information security policy
ApprovedVersion 1
Risk assessment and treatment methodology
In reviewVersion 1
Submitted by Anna Kowalska on 28 October 2026. Waiting for Ewa Lewandowska. Editing is locked.Access control policy
DraftVersion 0.1
Documents that match how you work
Policies and procedures drafted from your structured answers, then reviewed and approved by authorized people in your company.
Fresh evidence
Records with owners, periods and review dates. You know what is missing or out of date before an auditor asks.
EvidenceFreshness
- Access review export, Q3 2026Fresh until 29 January 2027
- Training content with its last update dateBecomes stale in 12 days
- A dated restore test record with the result and durationStale since 14 October 2026Each evidence item has a review date set by its owner. After that date it counts as stale and gets half credit until it’s renewed and accepted again.
The mobile app for evidence and tasks
For the part of the work that happens away from a desk. Each person sees what is asked of them, and the rest of the management system stays on the web.
For iPhone with iOS 17 or later.
- Everyone reads and accepts the policies asked of them, and each acceptance is recorded with their name, the date and the version they read.
- An evidence request is answered with a photo. With no signal, the answer waits on the phone and is sent the next time the tasks are opened or refreshed with a connection.
- Everyone sees the actions assigned to them, starts them and marks them done.
From uncertainty to a system you can explain
Five steps, in Polish or English, at the pace of a smaller company.
Define the scope
Describe your organization, locations and services, and have an authorized person approve the scope.
Run the gap assessment
Answer QuickISO’s original questions. Questions that don’t fit your company profile don’t appear.
Plan owned actions
Every gap gets an owner and a due date, and evidence is collected where the work happens.
Review and approve documents
Drafts are composed from your structured answers by QuickISO’s own templates and marked for review. People approve them, and today no model takes part.
Follow an explainable readiness indication
A percentage with its likely range, assessment coverage and calculation, always for a defined scope. It isn’t a certification decision.
An audit by an independent certification body
QuickISO supports implementation and preparation for an independent certification audit. It doesn’t issue certificates and can’t promise an audit result.
No model writes your documents.
A model could draft where it would help, and today it is switched off. If we switch it on, every document says so on every page and a person still approves it.
What actually produces each thing
- Your documents are composed from your own answers by QuickISO's own templates. No model is involved and nothing you write is sent anywhere.
- The records that could show a practice works are listed beside each question, written by us rather than generated.
- A readiness indication is explained by the calculation that produced it, not by a summary somebody has to trust.
What a model will never do here
- Approve documents, accept risks or close findings
- Decide which requirements apply or judge evidence sufficient
- Invent facts about your company
- Reproduce the text of ISO standards
Three questions to start with
Three questions from the self-check. There is no score here on purpose: a number without its basis and its uncertainty would mislead.
Not assessed is not the same as not met
The readiness view keeps uncertainty apart from confirmed gaps. Next to the indication it shows the likely range, assessment coverage and self-reported implementation.
- Approved
- Evidenced
- In place, no evidence
- Planned
- Evidence expired
- Not met
- Not assessed
3 of the 70 self-check questions
You answered 0 of 3 questions.
The full self-check in QuickISO has 70 original questions, adapts to your company profile and shows how its readiness indication is calculated.
What people ask before they start
Can we use QuickISO today?
Yes. Request an account with the form below: we set up your organization’s workspace in the EU region and send the invitation to the address you give us. The first 30 days are free.
Will we get a certificate from QuickISO?
No. Certification decisions are made by independent, accredited certification bodies. QuickISO helps you prepare for their audit.
We work with a consultant. Does QuickISO still make sense?
Yes. Your consultant can work in the same workspace as your team, and decisions, documents and evidence stay with your company.
Which languages does QuickISO support?
Polish and English. The interface language and the document language are chosen separately.
Trust needs evidence
Tenant isolation, role-based access, an append-only audit trail, encryption, and minimized, disclosed AI processing are design requirements for QuickISO.
QuickISO won’t claim certifications or data residency it can’t prove.
Who is behind QuickISO
I know what a document nobody follows afterwards costs, so an implementation ends with a working process, not a binder.
Request a QuickISO account
Tell us a little about your company. We’ll ask you to confirm your email address, then set up your workspace and send the invitation to that address.
30 days free