Recipe

ISO 27001 Compliance Doc

Generate a complete ISO 27001 compliance document from your security posture data. Nimbus maps your controls, policies, and evidence into a ready-to-submit package.

1

Scope & Context

Define your ISMS scope, interested parties, and internal/external issues. Nimbus pulls asset inventory and boundary data automatically.

2

Risk Assessment

Map threats to assets, assign likelihood/impact scores, and produce a risk treatment plan aligned with Annex A controls.

3

Statement of Applicability

Auto-generate the SoA with inclusion/exclusion justifications for all 93 Annex A controls. Export as PDF or DOCX.

4

Evidence Pack

Attach policy documents, audit logs, and training records. Nimbus timestamps and hashes every artifact for auditor verification.

Ready for your Stage 2 audit?

Nimbus produces auditor-ready documentation that maps directly to ISO/IEC 27001:2022 clause structure. No manual formatting required.