COMPLIANCE365

Checkpoint · ISO 27001

ISO 27001 software that runs in your own Microsoft 365

Checkpoint holds your whole ISO 27001 management system, from the risk register to the Statement of Applicability, as SharePoint lists in your own tenant. It reads your Microsoft 365 security settings to evidence the technical controls, and it gets you to the Stage 1 and Stage 2 audits with the packs your certifier asks for.

Open the Statement of Applicability in the demoSee pricing

The demo is the real console with sample data. No sign-up.

Checkpoint Statement of Applicability for ISO 27001: each Annex A control with its scope, implementation status, the other frameworks it also satisfies, owner, assurance, verification date and evidence link
Checkpoint, demo tenant with sample data. Open this screen in the demo

What Checkpoint holds for ISO 27001

  • All 93 Annex A controls of ISO/IEC 27001:2022, across the Organizational, People, Physical and Technological themes, in a Statement of Applicability with an inclusion or exclusion justification for each.
  • Clauses 4–10 as requirement checklists, each needing evidence before it can be marked met.
  • A risk register aligned to ISO 31000 and ISO 27005, with treatment actions, owners and residual-risk acceptance.
  • Internal audit, management review, objectives, incidents, suppliers, assets and the legal and regulatory register.
  • Policies drafted for your organisation, approved with a recorded sign-off and exported to Word.
  • A Stage 1 readiness pack, a Stage 2 sampling dry run and time-boxed, read-only access for your auditor.

Measured from your Microsoft 365

The Microsoft 365 scan runs 49 checks across identity, devices, apps and data, monitoring, privacy, continuity, suppliers and governance, and suggests the status of the Annex A controls they evidence. Every scan is kept as dated evidence.

Checkpoint signs in with Microsoft Entra and reads your settings through Microsoft Graph with read-only, delegated permissions. Your records are SharePoint lists in your own tenant, so if you stop using Checkpoint they are still yours. How Checkpoint works.

Questions

Does Checkpoint certify us to ISO 27001?
No. Certification comes from an accredited certification body. Checkpoint runs the management system and prepares the evidence and packs that body audits.
Which version of ISO 27001 does it use?
ISO/IEC 27001:2022, with its 93 Annex A controls.
Where is our data stored?
In SharePoint lists in your own Microsoft 365 tenant. Compliance365 has no database holding your registers.
Can we do it ourselves, or do we need a consultant?
Either. Self-serve is priced per framework with a 7-day free trial, and Checkpoint is included at no extra cost in a Compliance365 consulting engagement.

Checkpoint for other frameworks

Microsoft Teams