Bundles build seriesbundleopen sourcesecurity programme

ISO 27001 + Build Foundation

ISO 27001:2022 Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

The compliance workbook tells you what the framework requires and how to evidence it. The build volumes make the controls exist.

ISO 27001:2022 Readiness Accelerator — the framework workbook, with its requirement mapping and evidence set.

Vol. 02 — Asset Inventory & Discovery. Everything scopes from the inventory, and most framework requirements are unanswerable without it.

Vol. 01 — Detection & Monitoring. The continuous-monitoring requirement, actually built — with the tuning and validation that turn a running stack into evidence.

Vol. 06 — Identity & Access. Access control, authenticators and joiner-mover-leaver, which between them carry more framework clauses than anything else in the series.

Each build volume prints the exact clauses it satisfies before any installation step, so the work lands in your evidence pack rather than beside it.

Twelve months of updates on the build volumes. Ships without support.

What's in this bundle

Compliance 20 tabs

ISO 27001:2022 Readiness Accelerator

20-tab ISMS implementation workbook for ISO 27001:2022 — all 93 Annex A controls across 4 themes, 11 new 2022 controls, Clauses 4–10 ISMS framework, transition gap analysis from 2013, and policy library.

Architecture & Build 9 pages

Build Series Vol. 02 — Asset Inventory & Discovery

Discovery tells you what is out there. The source of truth holds what you have decided about it. The control lives in the reconciliation between them, not in either list.

Architecture & Build 9 pages

Build Series Vol. 01 — Detection & Monitoring

Wazuh, Suricata and Zeek assembled into a stack one person can operate, with the tuning and detection validation that almost every deployment skips.

Architecture & Build 9 pages

Build Series Vol. 06 — Identity & Access

One front door, authenticators that survive phishing, privileged identities separated from daily work, and access that genuinely ends when people do.