Toolkits

Run the program. Not a blank spreadsheet.

Each toolkit is an Excel workbook and a Word handbook. The requirements are already filled in and numbered to the official text, and the dashboard updates itself as you work. One payment of $199, yours to keep.

Framework toolkits

Every requirement of one framework, pre-loaded and numbered to the official text.

HIPAA Security Rule

$199 once

Who it is for: Clinics, practices, health tech companies and their business associates.
What is inside: 48 Security Rule requirements cited to 45 CFR 164 (Required or Addressable), a BAA register, 15 evidence items, findings, actions, risks and a self-updating dashboard.

SOC 2 Readiness

$199 once

Who it is for: SaaS and service companies preparing for a first SOC 2 Type 1 or Type 2 report.
What is inside: 36 checks numbered to the Trust Services Criteria, a system scope sheet for your system description, 10 evidence items and a readiness plan.

ISO 27001 ISMS

$199 once

Who it is for: Teams building an ISMS or preparing for a stage 1 or stage 2 audit.
What is inside: 37 checks across clauses 4 to 10 and Annex A (2022, with Amendment 1), a Statement of Applicability worksheet and an internal audit and review rhythm.

PCI DSS Readiness

$199 once

Who it is for: Merchants and service providers that store, process or transmit card data.
What is inside: 28 checks referenced to PCI DSS v4.0.1 requirement numbers, including those mandatory since March 2025, plus a cardholder data scope inventory.

AI Governance

$199 once

Who it is for: Companies building or deploying AI that need a program customers can follow.
What is inside: 71 checks across NIST AI RMF, ISO/IEC 42001 and EU AI Act Article 50, an AI system inventory, impact and oversight tracking.

Program toolkits

The governance processes auditors and customers ask about, ready to run.

Audit Readiness

$199 once

Who it is for: Teams facing an external audit or customer assessment in the next few months.
What is inside: 16 audit-preparation checks plus a 22-point NIST CSF 2.0 baseline, an audit plan, an auditor request list with on-time tracking, and evidence readiness.

Evidence Governance

$199 once

Who it is for: Compliance teams collecting evidence for more than one framework or customer.
What is inside: 16 evidence-management checks, a 62-item cross-framework evidence catalog (SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST CSF) and a retention schedule.

Risk Governance

$199 once

Who it is for: Founders and risk owners who need a risk process that stands up to questions.
What is inside: 17 risk-management checks, a scored risk register (likelihood x impact), risk appetite by category and acceptance tracking with review dates.

Supplier Governance

$199 once

Who it is for: Companies whose customers or auditors ask how they manage vendor risk.
What is inside: 16 supplier-governance checks and a tiered supplier inventory that schedules reassessments by tier and flags overdue ones.

Management Review

$199 once

Who it is for: Leadership teams running an ISO-style management system or board security review.
What is inside: 16 review checks covering the inputs and outputs ISO management reviews expect, a decision log with overdue flags and a ready-made agenda.

Every toolkit

All 11 toolkits for $999

$2,189 if bought one by one. Useful for consultants and teams running several frameworks at once. Want the work done in software instead? The Standards Readiness app signs every report.

Ask about the bundle See app pricing

In every toolkit

Workbook: Requirements with suggested actions, evidence tracker, findings, corrective actions, risk register, KPIs, management review log and a 12-month readiness plan with a chart.
Handbook: Your first week, the critical requirements to tackle first, the evidence to collect, roles, operating rhythm, escalation rules and a 90-day plan.

Works where you work

Format: Excel (.xlsx) and Word (.docx). Opens in Microsoft 365, Google Sheets and Docs, or LibreOffice.
Edition: October 2026, checked against the official sources linked on each card.

Toolkits help you organise and track your own readiness work. They are not legal or insurance advice, they do not replace an auditor or assessor, and using one does not by itself mean you meet a standard or law. Requirement wording is our own, numbered to the official sources; we do not reproduce copyrighted standard text. Readiness compared with an audit.