Free templates
Your first draft is already written.
Security policy, SoA, risk matrix, mandatory documents, supplier questionnaire, NIS2 and CRA checklists in Word or Excel and as PDF. Free, no form.
All templates, straight from the product
Every file is built from the same content Complass works with in the portal. When a requirement changes there, the template gets a new version.
-
Template based on ISO/IEC 27001
Information security policy
The top document of your ISMS, structured along clause 5.2 of the standard: fill-in guidance and a suggested wording for each section.
Word (DOCX) · PDF · As of 26 September 2026
-
NIS2 checklist
NIS2 checklist for Sections 30 and 32 BSIG
Every minimum measure under Section 30 (2) BSIG and the reporting duties under Section 32 BSIG, each row with what an audit wants to see as evidence.
Excel (XLSX) · PDF · As of 12 November 2026
-
Cyber Resilience Act checklist
CRA checklist for Annex I, Art. 13 and Art. 14
Annex I parts I and II plus the manufacturer and reporting duties of Art. 13 and 14, as a list to assess per product version.
Excel (XLSX) · PDF · As of 12 November 2026
-
Template based on ISO/IEC 27001:2022
Statement of Applicability (SoA)
All 93 Annex A controls in one list, each row with columns for applicability, justification, implementation status and evidence.
Excel (XLSX) · PDF · As of 26 September 2026
-
Risk assessment template
Risk matrix 5×5 with assessment criteria
A matrix of likelihood and impact with described levels, risk classes, acceptance rules and a risk register to fill in.
Excel (XLSX) · PDF · As of 26 September 2026
-
Template based on ISO/IEC 27001:2022
ISO 27001 mandatory documents list
The documented information from clauses 4 to 10 and typical Annex A documents, each row with its clause and columns for your status.
Excel (XLSX) · PDF · As of 26 September 2026
-
Supply chain security template
NIS2 supplier questionnaire
Questions for suppliers and service providers on supply chain security under Section 30 BSIG, each with its reference and the matching evidence.
Excel (XLSX) · Word (DOCX) · PDF · As of 1 November 2026
Download, adapt, approve
Download
No sign-up and no e-mail address. Word and Excel to edit, PDF to read and print.
Ajustar
Replace the entries in square brackets, tailor the wording to your company, enter status and evidence.
Aprovar
Top management signs the policy. A completed checklist shows where evidence is still missing.
Passing them on is explicitly allowed
All templates are licensed under Creative Commons Attribution 4.0 International (CC BY 4.0). You may use, change and pass them on, also in client projects and commercially. Please name the source, for example like this:
Template: Complass (complass.eu), CC BY 4.0
License text at Creative Commons
This template is not legal advice. It does not replace checking which requirements apply to your company and does not guarantee any audit or certification result.
The portal takes it from there
Política e diretrizes
The same template with fill-in help in the document, review, four-eyes approval, versions and acknowledgment by employees.
Requirements and evidence
The same rows as a catalog with maturity level, evidence with checksum, tasks with owners and due dates.
Teste o Complass com os seus próprios dados
Crie o seu próprio acesso de teste, se quiser com um projeto de exemplo por referencial. Se preferir ver primeiro o Complass, peça uma demonstração.