ISO 27001 · ISO 20000 · ITIL 4 · NIST · GDPR

Stop Building IT Documentation from Scratch

40 ready-to-use SOPs, 10 operational forms, Excel Dashboard, and Audit Checklist — everything your IT department needs to be audit-ready, in hours, not months.

Get the Complete Kit — $49
Editable Word & Excel files Instant access after purchase Not a course — ready-to-apply material

Your IT Team Is Wasting 200+ Hours
Writing Documents That Already Exist

When documentation gaps show up during an audit, the real damage isn't just a finding — it's the scramble, the overtime, and the risk that follows.

⏳

Months of writing time

A single well-structured SOP takes 8–15 hours to research, write, review, and format. Multiply that by 40 procedures and your team loses months of productivity.

🚨

Audit findings pile up

Missing or poorly written procedures are the #1 source of nonconformities in ISO 27001 audits. Each finding triggers corrective actions, follow-up audits, and management pressure.

📋

No records to show auditors

Having a procedure is not enough — auditors demand evidence it's being followed. Without operational forms capturing each activity, you can't prove your ISMS is working.

💸

Consulting fees that keep growing

Hiring a consultant to write 40 SOPs and 10 forms? Budget $18,000–$45,000. And you still need to customize everything to fit your organization.

🔄

Inconsistent, scattered documents

Different authors, different formats, different depths. Without a unified standard across procedures and records, your ISMS looks fragmented — and auditors notice immediately.

What if you could skip all of that?

Imagine receiving 40 professionally structured SOPs plus 10 ready-to-use operational forms — each designed to work together. Your procedures define the what; your forms capture the evidence.

Save 200+ hours of documentation work
Walk into audits with procedures AND evidence
Forms linked directly to each SOP
Reduce security incidents through clear procedures
ISO 27001 & ISO 20000 alignment from day one
See What's Included & Pricing →

Benefits That Impact Your Bottom Line

Every SOP and every form is designed to solve a real operational problem — not just fill a compliance checkbox.

🛡️

Pass Audits with Zero Stress

Every SOP maps directly to ISO 27001, ISO 27002, ISO 20000, and NIST controls. Pair them with the 10 forms and your auditor finds both the procedure and the evidence — exactly what they need.

⚡

Implement in Days, Not Months

Stop starting from a blank page. Open any file, add your company name and logo, adjust roles in the RACI matrix, and you have a production-ready procedure. Most teams are operational within a week.

💰

Save $18,000+ in Consulting Fees

A consultant charges $300–$800 per SOP, plus additional fees for forms. This kit gives you everything at a fraction of the cost — with the same depth and structure professionals deliver.

📋

Forms That Close the Evidence Gap

The 10 operational forms are directly linked to your SOPs. Each risk assessment, incident, or change request follows the same structure as the procedure that governs it — generating audit-ready records automatically.

🔄

Standardize Across Your Entire IT Team

One format, one structure, one vocabulary across 40 SOPs and 10 forms. When your department follows the same templates, handoffs become seamless and onboarding takes days instead of weeks.

⚙️

Fully Editable — Make It 100% Yours

Every file is a standard .docx or .xlsx — no locked PDFs. Edit in Word, Google Docs, or LibreOffice. Add your logo, adjust terminology, expand sections. Complete ownership, forever.

From Purchase to Implementation in 4 Steps

1

Get the Complete Kit

One purchase: all 40 SOPs, 10 operational forms, the Excel Dashboard and the Audit Checklist.

2

Get Instant Access

After payment, download all files immediately. No waiting, no drip content, no lessons to watch. This is not a course.

3

Customize to Your Company

Open any file in Word or Google Docs. Add your logo, company name, adjust RACI roles, and tailor procedures and forms to your environment.

4

Operate & Track

Use the SOPs to govern operations, the forms to capture evidence, and the Excel Dashboard to measure KPI performance — a complete cycle.

⚠️ This is NOT a course or training. It's a complete kit of ready-made, editable materials (Word & Excel) — designed for immediate, practical implementation.

40 SOPs Covering Every IT Domain

Seven thematic blocks — from information security to people management — so nothing falls through the cracks.

1 Information Security

10 SOPs · ISO/IEC 27001/27002 · NIST
  • Risk Assessment & Treatment
  • Access Control & User Privileges
  • Password Policy & MFA
  • Cryptography & Key Management
  • Physical & Environmental Security
  • Security Incident Response
  • Vulnerability & Patch Management
  • Supplier & Third-Party Security
  • Data Classification & Labeling
  • Clear Desk & Removable Media

2 IT Service Management

8 SOPs · ISO/IEC 20000-1 · ITIL 4
  • Incident Management & Service Desk
  • Problem Management & Root Cause
  • Change Management & CAB
  • Configuration Management & CMDB
  • Service Level Management & SLA
  • Release & Deployment Management
  • Capacity & Performance Management
  • Availability & Service Continuity

3 IT Operations & Infrastructure

7 SOPs · CIS Controls · NIST
  • Backup & Recovery Operations
  • Network Management & Monitoring
  • Cloud Governance & Security Posture
  • Endpoint Management & MDM
  • IT Asset Procurement & Lifecycle
  • Audit Logging, Monitoring & SIEM
  • Secure Disposal & Data Sanitization

4 Secure Development & Testing

2 SOPs · NIST SSDF · OWASP
  • Secure Software Development Lifecycle (SSDLC)
  • Penetration Testing & Red Team

5 Risk, Audit & Compliance

5 SOPs · ISO/IEC 27001 · ISO 19011
  • IT Risk Management & ISMS Continuous Improvement
  • IT Compliance Audit & Evidence Collection
  • IT Internal Audit Planning & Execution
  • Nonconformity Management & CAPA
  • IT Policy Review & Document Control

6 Data Privacy

3 SOPs · GDPR · LGPD · ISO/IEC 27701
  • Data Privacy (GDPR/LGPD)
  • Personal Data Management & Privacy Controls
  • Data Breach Notification

7 People & Acceptable Use

5 SOPs · ISO/IEC 27002 · NIST
  • Security Awareness Training & Phishing
  • Information Security Awareness & Training Program
  • IT Onboarding & Offboarding — Access Provisioning
  • Remote Work & BYOD Security
  • Acceptable Use Policy for IT Systems

10 Operational Forms & Records

SOPs define the what and how. These forms are the evidence that your procedures are actually being followed — the piece that turns a good ISMS into an auditable one.

IT-FORM
001

Information Security Risk Assessment Record

Threat identification, inherent risk scoring (L×I), treatment plan with ISO 27002 control references, residual risk calculation, GDPR/LGPD regulatory flag, and 3-level approval sign-off.

ISO 27001 Cl. 6.1Risk ScoringGDPR / LGPD
IT-FORM
002

Security Incident Report Form

End-to-end incident lifecycle: P1–P4 classification, 10-category taxonomy, containment action log, root cause analysis (5 Whys / Fishbone), corrective actions, lessons learned, and regulatory notification tracker.

ISO 27001 A.5.24NIST 800-61P1–P4 Severity
IT-FORM
003

Access Request & Provisioning Form

Full access lifecycle — new, modify, revoke, or temporary — with 4-level approval workflow (manager → resource owner → security → CISO), privileged access section, and user acknowledgment.

ISO 27002 Cl. 5.15Least PrivilegePAM
IT-FORM
004

IT Change Request Form — CAB

Risk & impact assessment, step-by-step implementation plan (6 rows), rollback plan with trigger criteria, test/success criteria, 5-role CAB approval table, and post-implementation review.

ISO 20000-1ITIL 4CAB Workflow
IT-FORM
005

Vulnerability Management Tracking Record

Scan identification, vulnerability register with CVSS scoring, remediation tracking with SLA targets (Critical ≤24h / High ≤7d / Medium ≤30d / Low ≤90d), and exception/risk acceptance section.

ISO 27002 Cl. 8.8CIS Control 7CVSS Score
IT-FORM
006

IT Asset Inventory & Lifecycle Record

Asset registration through disposal: security controls (FDE, EDR, MDM, hardening), transfer log, maintenance history, and NIST 800-88 sanitization/certificate of destruction record.

ISO 27002 Cl. 5.9NIST 800-88CMDB
IT-FORM
007

Nonconformity & Corrective Action (CAPA) Record

NC identification (source, severity, standard reference), root cause analysis with method selection, corrective and preventive action plans with priority, and effectiveness verification + closure sign-off.

ISO 27001 Cl. 10.1RCA MethodsAudit Ready
IT-FORM
008

Supplier Security Assessment Form

14-question security control assessment, contractual requirements verification (DPA, audit rights, sub-processor disclosure, incident SLA), Tier 1–4 risk classification, and approval decision with conditions.

ISO 27002 Cl. 5.19GDPR / LGPDTier 1–4
IT-FORM
009

Backup & Recovery Test Record

RTO/RPO target vs. actual, step-by-step recovery log with pass/fail, data integrity verification (checksum, hash, record count, app test), outcome assessment, and corrective actions for failures.

ISO 22301RTO / RPOData Integrity
IT-FORM
010

IT Onboarding & Offboarding Checklist

Two-page form: 6 onboarding categories (hardware, network, email, apps, security, CMDB — 30 tasks) + 4 offboarding categories (access revocation, data, hardware return, security verification — 20 tasks).

ISO 27002 Cl. 6.5JML ProcessMDM / DLP
🔗

Each form is directly linked to its corresponding SOP. When your team follows the Incident Response SOP, they fill IT-FORM-002. When a change is requested, IT-FORM-004 is opened alongside the Change Management SOP. Every form has a professional header, approval signature block, and revision history — generating the objective evidence your next audit requires.

Inside the kit

See real pages from the material

These images were generated straight from the files you receive — nothing was mocked up or redrawn. Tap to enlarge.

Real excerpt from the file SOP-IT-001 Information-Security-Risk-Assessment (Word)
SOP-IT-001 Information-Security-Risk-AssessmentWord · page 2 of 11
Real excerpt from the file IT-FORM-001 Risk-Assessment-Record (Word)
IT-FORM-001 Risk-Assessment-RecordWord · page 1 of 2
Real excerpt from the file SOP-IT-002 Access-Control-User-Privilege-Management (Word)
SOP-IT-002 Access-Control-User-Privilege-ManagementWord · page 2 of 10
Real excerpt from the file IT-FORM-004 Change-Request-CAB (Word)
IT-FORM-004 Change-Request-CABWord · page 1 of 2
Real excerpt from the file IT-FORM-002 Security-Incident-Report (Word)
IT-FORM-002 Security-Incident-ReportWord · page 1 of 2

Powerful Excel Tools to Track & Measure

SOPs define what to do. Forms capture what was done. These tools help you prove it's working — and improve it over time.

📊 IT Management Dashboard

A complete ISMS monitoring workbook with 7 interconnected sheets. Track risks, incidents, KPIs, audit results, and corrective actions in one place. Over 2,000 formulas with auto-calculated risk scores, conformity rates, and resolution times.

Risk Register (500 rows)24 KPIs monthlyIncident LogCAPA Tracker80+ ISO controlsConditional formattingData validation

✅ IT Security Audit Checklist

A structured audit workbook covering all 93 ISO/IEC 27002:2022 Annex A controls across 4 categories. Executive summary with auto-calculated conformity rates, maturity scoring guide (1–5), and space for findings, corrective actions, and verification tracking.

93 controls assessedExecutive Summary5-level Maturity ModelOrganizational (37)People (8)Physical (14)Technological (34)

Invest Less Than a Single Hour of Consulting

Professionally structured, fully editable Word files with 15 standardized sections per SOP — plus forms and Excel tools.

💳 The platform will automatically convert the value to your local currency at checkout.
Secure payment via Hotmart. Immediate download after purchase.

Built for IT Professionals Who Need Results

👨‍💼

IT Managers & CISOs

Establish a complete documentation framework — procedures and records — for your department. Demonstrate compliance with structured, traceable SOPs backed by operational evidence.

🏢

Companies Pursuing ISO Certification

Accelerate your ISO 27001 or ISO 20000 journey. Start with a solid foundation of SOPs and forms instead of building from zero — both the policies and the evidence trail.

🔍

Consultants & Auditors

Use as a baseline for client engagements. The linked SOP + form structure delivers professional results faster and impresses clients with a complete, integrated documentation system.

🚀

Startups Scaling IT Operations

Skip the trial-and-error phase. Implement enterprise-grade processes and capture operational records from day one — without the enterprise budget or the consultant wait times.

🏥

Regulated Industries

Healthcare, fintech, government, pharma — industries where documentation isn't optional. Meet regulatory expectations with comprehensive IT procedures and audit-ready records for every key process.

📚

Quality & Compliance Teams

Align IT documentation with your management system. Consistent format, standardized sections, and forms that generate the objective evidence your next audit requires — automatically.

Frequently Asked Questions

Is this a course or training program?
No. This is a ready-made kit of editable materials (Word and Excel files). There are no lessons, videos, or modules. You download the files immediately after purchase and start customizing and using them right away.
What format are the files? Can I edit them?
All SOPs and forms are .docx format (Microsoft Word) and spreadsheets are .xlsx format. Edit freely in Word, Google Docs, or LibreOffice. Add your logo, change text, adjust sections — 100% yours to customize.
How do the forms connect to the SOPs?
Each form is designed to complement a specific SOP. IT-FORM-001 (Risk Assessment) supports the Risk Assessment SOP; IT-FORM-002 (Incident Report) supports the Incident Response SOP; IT-FORM-004 (Change Request) pairs with the Change Management SOP — and so on. The forms generate the objective evidence that proves your SOPs are being followed, which is exactly what auditors look for.
Which standards and frameworks are covered?
The SOPs and forms are aligned with ISO/IEC 27001:2022, ISO/IEC 27002:2022, ISO/IEC 20000-1, ISO 22301, ITIL 4, NIST SP 800-series, CIS Controls, GDPR, and LGPD. Each SOP references applicable clauses; each form references the relevant standard in its header and tags.
What's included in each SOP?
Every SOP follows a 15-section premium template: Identification, Objective, Scope, Definitions, References, RACI Matrix, Resources, Procedure (with detailed sub-steps), Flowchart placeholder, KPIs (10–15 per SOP), Process Risks, Records, Nonconformities, Annexes, and Revision History + Approvals. Thoroughly detailed — not a skeleton.
What exactly do I get for $49?
All 40 SOPs + 10 operational forms + Excel Dashboard (2,000+ formulas) + Audit Checklist (93 ISO 27002 controls) — the full, integrated IT management documentation system, for a one-time $49.
Can I use this for my clients or multiple companies?
Yes. The files are fully editable and customizable per engagement. Consultants commonly use them as a baseline for client projects. There is no restriction on internal company use or client work.
How do I access the files after purchase?
Immediately after payment on Hotmart, you receive an email with a download link. Files are also available anytime through your Hotmart account. No waiting period — instant delivery.

Your IT Department Deserves a Complete
Documentation System

40 SOPs. 10 operational forms. Two Excel tools. One investment that pays for itself in the first hour saved.

Get the Complete Kit — $49