A complete paper trail,
already written.
Each toolkit is a full set of editable Word and Excel files for one standard: manual, policies, procedures, forms and registers, stamped with your company name. Find your standard, check every file title, then pay once and download.
Start from your situation
Most people are asked for a standard by a customer, a tender or a regulator. Pick the one closest to yours.
All toolkits
Quality Management Systems
Asked for by Customers, tenders and prequalification forms in almost every sector.
The core toolkit for organizations certifying a general quality management system — process control, customer satisfaction, and continual improvement.
Occupational Health & Safety Management
Asked for by Main contractors, industrial clients and site owners, especially for site-based work.
Worker consultation and participation, hazard identification, the hierarchy of controls, contractors, emergency response and incident investigation.
Environmental Management Systems
Asked for by Government tenders, export customers and clients with sustainability or ESG targets.
Aspects with life cycle thinking, compliance obligations, risks and opportunities, planning of changes, emergency response, and every procedure, form and register an auditor expects.
Information Security Management
Asked for by Enterprise clients, banks, government buyers and anyone sending you security questionnaires.
Risk assessment and treatment, a Statement of Applicability for all 93 Annex A controls, supplier and cloud security, incidents, continuity and secure development.
Food Safety Management Systems
Asked for by Retailers, hotel and catering groups, food brands and regulators.
Prerequisite programmes, hazard analysis with CCPs and OPRPs, validation and verification, traceability, unsafe product and recall, and allergen control.
Energy Management Systems
Asked for by Energy-intensive industry, regulators with efficiency rules and buyers tracking emissions.
Energy review, significant energy uses, EnPIs and baselines, data collection, operational control, design, procurement and verification of savings.
Medical Devices Quality Management
Asked for by Device regulators, notified bodies, distributors and OEM customers.
Risk management, the medical device file, design controls, validation, traceability, complaint handling and regulatory reporting, and advisory notices.
Business Continuity Management
Asked for by Banks, government entities, outsourcing clients and regulators of critical services.
Business impact analysis, risk assessment, strategies, response structure, plans, exercises and recovery.
IT Service Management
Asked for by Clients of managed service providers, data centres and internal IT departments.
Service catalogue, service levels, assets and configuration, change and release, incident and problem, availability, continuity and security.
Anti-Bribery Management
Asked for by Government contracts, international partners and compliance-led clients.
Bribery risk assessment, due diligence, financial and non-financial controls, gifts, hospitality and conflicts of interest, and concerns and investigations.
Educational Organization Management
Asked for by Education regulators, schools, training centres and corporate training buyers.
Focus on learners, curriculum control, safeguarding and inclusion, assessment and release of results, and complaints and appeals.
Inspection Body Management Systems
Asked for by Accreditation bodies, regulators and clients of third-party inspection services.
Impartiality, competence, equipment, subcontracting, inspection methods, reporting, complaints and appeals. Built without the 2026 text; verification essential before use.
Road Traffic Safety Management
Asked for by Oil and gas operators, logistics clients and organizations with large fleets.
Performance factors, speed and fatigue control, driver and vehicle safety, journey management, emergency response and crash investigation.
Asset Management
Asked for by Utilities, infrastructure owners, transport operators and asset-heavy industry.
Asset criticality and risk, lifecycle decisions, asset information, maintenance, renewal, change and contractors, with predictive action.
Compliance Management Systems
Asked for by Boards, regulators, investors and partners in regulated sectors.
Obligations and regulatory change, compliance risk, governance and culture, controls, third parties, speak-up and investigations.
Security Management Systems
Asked for by Ports, freight forwarders, warehouses, customs programmes and shippers.
Critical assets, security risk, access, cargo and seals, vetting, partners, plans and drills.
Privacy Information Management Systems
Asked for by Clients sending privacy questionnaires, data protection authorities and processors’ customers.
PII inventory, privacy risk and impact assessment, lawful basis, rights requests, retention, transfers, processors and breaches.
Medical Laboratories: Quality and Competence
Asked for by Health authorities, accreditation bodies, hospitals and insurers.
Competence, equipment and traceability, reagent lots, pre-examination, method verification, quality control and EQA, and reporting.
Facility Management Systems
Asked for by Building owners, property groups and clients of facility management providers.
Space and assets, contracts and suppliers, health, safety and security, environment and continuity, SLAs and performance.
Event Sustainability Management Systems
Asked for by Event owners, venues, sponsors and government events programmes.
Event design, responsible procurement, venues and safety, environment and inclusion, stakeholder engagement, legacy and climate.
Every file title, before you pay
Each toolkit page lists the folders and the name of every document in them, so you can check coverage first.
Your details, throughout
Company name, address and signing authority are entered once after payment and applied to every file.
Editable, not locked
Standard Word and Excel files you revise as your system matures. Downloads stay open for 7 days after payment.