Is anybody use publicly available (or relatively cheap) templates of procedures for ISO 27001 for build own information security management system capable to be conform standard. Any recommendation?
After such organic building system did you certified it? Or crucial was reach comparable metrics and staff behavior, not official papers?
Something like this from the ISO27k Forum? I found a whole bunch of paid-for templates too.
As requested. From the linked site:
The FREE ISO27k Toolkit consists of a collection of ISMS-related materials contributed by members of the ISO27k Forum, either individually or through collaborative working groups organized on the Forum. We are very grateful for their community-spirited generosity in allowing us to share them with you.
The Toolkit is a work-in-progress: further contributions are most welcome, whether to fill-in gaps or provide additional examples of the items listed below.
Please observe the copyright notices and Terms of Use.
IMPORTANT DISCLAIMER: this is generic information donated by various individuals with differing backgrounds, competence and expertise, working for a variety of organizations in various contexts. The ISO27k Toolkit is provided as a starting point for you to consider, adapt and enhance as necessary to suit your specific situation. Your information security risks are unique, so it is incumbent on you to assess and treat your risks as you and your management see fit. Don’t blame us if the ISO27k Toolkit is unsuitable or inadequate for your circumstances: we are simply trying to help!
Not sure what you class as relatively cheap, but ITG toolkits are good http://www.itgovernance.co.uk/shop/p-1507-no-4-starter-iso27001-2005-iso-27001-isms-documentation-toolkit.aspx?utm_source=social
