ISO 27001 Tool

ISO 27001 work often lives in spreadsheets, shared drives, and scattered Word docs. ISO 27001 Tool gives organisations one place to work through Annex A–style controls, record how each control is implemented, and prove progress with assets, evidence, and review dates.

It is multi-tenant by design: assessments and assets stay scoped to the organisation selected in the topbar switcher.

What the app does.

The app seeds a global ISO 27001-style control catalogue grouped by chapter. For the active organisation, you assess each control — applicability, policy notes, owner, status, and next review date — then link assets and attach file or URL evidence.

The controls list supports search and status filters. The dashboard shows overall completion, status counts, chapter progress bars, and a review calendar for upcoming and overdue items. Switching organisation reloads the ISO screens for that tenant so consultancies and multi-company groups can keep work separated.

Core problem it solves.

Without a shared system, it is hard to see overall compliance, which controls are overdue for review, or which assets and evidence support a control. Copying progress between organisations is error-prone. ISO 27001 Tool centralises the catalogue, per-organisation assessments, evidence, and review tracking so compliance work stays visible and scoped correctly.

Target users.

ISO 27001 Tool is for information security managers, compliance officers, ISO 27001 implementers, and multi-organisation consultancies who need to track control assessments and reviews per organisation.

Tech stack.

• Frontend: Angular 19, PrimeNG, Quill rich text
• Backend: .NET 8, ASP.NET Core
• Database: PostgreSQL
• Platform: BBWT3-Lite with organisation context and TenantId claim for multi-tenant isolation