ISO 27001 Audit Plan Template
★★★★★ – Google 5-Star Reviews from Businesses Just Like You.
The Ultimate ISO 27001:2022 Audit Plan Template
- ISO 27001:2022 Compliant
- Prewritten and Ready to Go
- Easy to implement
- Easy to configure
BONUS: Now includes the Step-by-Step How To Conduct An Internal Audit / Gap Analysis
Part of the Ultimate ISO 27001 Toolkit and also exclusively available to buy stand-alone.
$ 9.97
Overview
The ISO 27001 Audit Plan is a required document for the ISO 27001 standard. There will be a series of ongoing internal audits and external audits for ISO 27001 certification. It is a requirement to conduct at least one full internal audit annually and we use the audit plan to record when audits occurred and when future audits are planned. On the face of it a simple and straight forward template that forms part of the wider requirements for audit but that can be purchased as a standalone document if needed.
Example ISO 27001 Audit Plan Template
ISO 27001 Audit Plan: the 2022 Version of the Standard
ISO 27001 Audit Plan: the 2013/2017 Version of the Standard
ISO 27001 Audit Plan Template FAQ
The ISO 27001 Audit Plan is in Microsoft Excel format
Yes. It fully meets the 2022 updated requirements to the ISO 27001 standard. It is also backward compatible with previous versions of the standard.
Anyone that wants to save time and money and have a pre populated ISO 27001 Audit Plan Template document that fully meets the requirements of the ISO 27001 standard and is ready to go.
It is 90% complete. It just requires a fast rebrand, checking and some minor additions that are clearly sign posted and marked. The main job you have is to pick when you will conduct your audits.
It is available as an immediate download once payment has been received.
No. The ISO 27001 Audit Plan Template is designed to be easy to implement and easy to configure. It comes with an easy to follow step by step guide. You are provided with a free hour of training if you need it.
We offer a free 30 minute 1-to-1 consultation as well as a free weekly ISO 27001 Q and A call and the unique ability to purchase consulting by the hour.
It depends on what you are trying to achieve. It works as a stand alone template but is designed to be part of a pack of information security documents that meet the needs of your business. The Ultimate ISO 27001 Toolkit is everything you need for ISO 27001 Certification.
The ISO 27001 Audit Plan Template is all ready written so you change the logo, brand it and you are ready to go. You can customise it based on your own requirements and needs.
We estimate that on average it will take you less than 1 hour. The templates require information that you know so there is nothing complicated.
The benefits of using the ISO 27001 Audit Plan Template are: Save time: the template is already fully populated and ready to go Meet the requirements of the standard: the template is mapped directly to the requirements of the ISO 27001:2022 standard Save money: you will not have to pay consultants to research and write the plan for you
Payments are handled entirely through Stripe. They are very secure. We do not handle the payment transaction. We do not store, process or transmit your card holder data.
You may also like…
The High Table ISO 27001 Implementation Suite was architected by Stuart Barker, a veteran practitioner with over 30 years of experience in systems security and risk management.
Holding an MSc in Software and Systems Security, Stuart combines academic rigor with extensive operational experience. His background includes over a decade leading Data Governance for General Electric (GE) across Europe, as well as founding and exiting a successful cyber security consultancy.
As a qualified ISO 27001 Lead Auditor and Lead Implementer, Stuart possesses distinct insight into the specific evidence standards required by certification bodies. He has successfully guided hundreds of organizations—from high-growth technology startups to enterprise financial institutions—through the audit lifecycle.
This toolkit represents the distillation of that field experience into a standardised framework. It moves beyond theoretical compliance, providing a pragmatic, auditor-verified methodology designed to satisfy ISO/IEC 27001:2022 while minimising operational friction.




