Description
Every toolkit we publish. Licensed for the work you actually do.
If you implement management systems for a living, you already know the problem with document packs: they are licensed to a single organisation. Use them on a second client engagement and you are outside the terms.
The Consultant Package removes that limit. It is the complete Governance Docs catalogue — 71 toolkits and 6,201 editable documents — licensed so that anyone in your firm can use them on an unlimited number of client engagements, and your clients keep what you deliver.
Bought individually, the 71 toolkits in this package list at $6,889. The Consultant Package is $1,399 one-time, delivered as a single 1.1 GB download.
What the Consultant Package is really worth
The $6,889 comparison is the small argument. The real one is this: whatever your day rate is, the Consultant Package costs less than a couple of days of it — paid once, for every engagement you will ever run.
A single ISO 27001 or SOC 2 implementation is weeks of drafting policies, procedures, registers, a Statement of Applicability, an internal audit programme and a management review pack. You have written all of it before. The Consultant Package is that drafting already done, in editable Word and Excel, with your client’s name still to go in — so the hours you bill go into scoping, risk, evidence and the audit itself rather than into retyping a document control procedure for the eleventh time.
It pays for itself inside the first engagement. Every engagement after that is margin.
Who the Consultant Package is for
It is built for people who deliver compliance work for a fee: independent ISO consultants, boutique GRC and cyber advisory firms, internal audit and virtual-CISO practices, and managed service providers who stand up management systems as part of onboarding. If you bill more than one organisation, the Consultant Package is the licence you need.
What you get
- All 71 toolkits — every framework we cover, listed in full below. Nothing is held back for a higher tier.
- 6,201 editable documents — policies, procedures, registers, forms, statements of applicability, audit checklists, gap-analysis and readiness tools.
- Formats you can actually bill from: 5,795 Microsoft Word and Excel files, plus 257 PowerPoint awareness and management-review decks, 100 reference PDFs, 25 Microsoft Project plans and 18 Visio process diagrams. Nothing locked or watermarked.
- Firm-wide licence. Every employee and contractor of your firm, not one named seat.
- Unlimited client engagements. No per-client fee, no reporting, no seat counting.
- Your clients keep their deliverables. What you adapt and hand over is theirs to keep and operate.
- A perpetual licence. One payment, no subscription, nothing to renew. The Consultant Package does not expire and never bills you again.
- 12 months of updates, including any new toolkit we publish in that window — and we reissue when a standard changes, not on a marketing schedule.
Everything inside the Consultant Package
This is the complete contents of the Consultant Package, toolkit by toolkit, with the number of documents in each. Document counts are exactly as shipped in the current build — not rounded up. Every toolkit name links to its own product page if you want to see the full document list and screenshots before you buy.
Information security, cyber and cloud — 21 toolkits, 1,312 documents
The largest block in the Consultant Package, and the one most firms live in.
| Toolkit | Documents |
|---|---|
| PCI DSS | 181 |
| ISO/IEC 27001 Information Security | 162 |
| CMMC | 116 |
| BSI C5:2026 Cloud Security | 110 |
| Saudi NCA Essential Cybersecurity Controls | 83 |
| NIS2 | 78 |
| ISO/IEC 27017 & 27018 Cloud | 67 |
| SOC 2 | 60 |
| NIST Cyber Risk Management (CSF) | 56 |
| GovRAMP (StateRAMP) & TX-RAMP | 52 |
| HITRUST CSF v11 | 47 |
| FedRAMP | 46 |
| CIS Controls v8.1 | 42 |
| TISAX / VDA ISA | 41 |
| NIST SP 800-53 | 40 |
| NIST SP 800-171 (CUI) | 35 |
| SWIFT CSP | 33 |
| CSA STAR Cloud Security | 32 |
| Cyber Essentials (UK) | 28 |
| IT & Cybersecurity KPI Set | 2 |
| ISO 27001 Assessment Tool | 1 |
Privacy and data protection — 7 toolkits, 708 documents
Five jurisdictions and two management-system standards, so a multinational client is covered from one pack.
| Toolkit | Documents |
|---|---|
| HIPAA | 165 |
| GDPR | 106 |
| Data Protection | 106 |
| India DPDP Act | 95 |
| Data Governance (DMBOK) | 91 |
| ISO/IEC 27701 Privacy Information Management | 82 |
| CCPA / CPRA | 63 |
AI governance and new EU regulation — 4 toolkits, 240 documents
The fastest-moving area we cover, and the reason the Consultant Package includes 12 months of reissues.
| Toolkit | Documents |
|---|---|
| EU Cyber Resilience Act | 74 |
| ISO/IEC 42001 AI Management | 68 |
| EU AI Act | 60 |
| NIST AI Risk Management Framework | 38 |
Quality, manufacturing and laboratories — 10 toolkits, 2,567 documents
Sector quality systems that generic compliance packs leave out entirely, and that the Consultant Package covers in full.
Health, safety, environment and energy — 8 toolkits, 268 documents
Everything an HSE or sustainability engagement needs, including the food chain, in one Consultant Package licence.
| Toolkit | Documents |
|---|---|
| ISO 14001 Environmental | 67 |
| ISO 50001 Energy Management | 55 |
| ISO 45001 Occupational H&S | 52 |
| HACCP | 31 |
| ISO 22000 Food Safety | 30 |
| ESG | 20 |
| ISO 39001 Road Traffic Safety | 12 |
| ISO 45001 Assessment Tool | 1 |
Medical devices and life sciences — 4 toolkits, 312 documents
A regulated-device client can be taken from design file to technical documentation without leaving the Consultant Package.
| Toolkit | Documents |
|---|---|
| ISO 13485 Medical Devices | 126 |
| EU IVDR | 74 |
| EU MDR | 68 |
| ISO 14971 Medical Device Risk | 44 |
Financial services and regulated markets — 5 toolkits, 343 documents
Prudential, operational-resilience and crypto-asset regimes, plus US financial reporting controls — the Consultant Package covers all five.
| Toolkit | Documents |
|---|---|
| DORA | 109 |
| MiCA Crypto-Asset Regulation | 104 |
| SOX / ICFR | 62 |
| SAMA Cyber Security Framework | 41 |
| Basel III Prudential Risk | 27 |
Governance, risk, continuity and service management — 12 toolkits, 451 documents
The management-system layer that ties a client’s frameworks together.
How the Consultant Package compares to the alternatives
Most consultants arrive at the Consultant Package having already tried one of the first three columns.
| Draft it yourself | GRC SaaS subscription | Buy toolkits one at a time | Consultant Package | |
|---|---|---|---|---|
| Cost to start | Weeks of unbilled time | Annual, per seat | $99 per toolkit | $1,399 once |
| Cost in year two | More unbilled time | Renews in full | $99 per new framework | $0 — nothing to renew |
| Frameworks covered | The ones you have written | Usually the popular handful | What you have bought so far | All 71 |
| Use on client engagements | Yours to use | Often restricted or per-client | Single organisation only | Unlimited, firm-wide |
| Client keeps the deliverable | Yes | Usually not the platform content | Not under the standard licence | Yes, permanently |
| If you stop paying | n/a | Access ends | Files stay | There is nothing to stop paying |
| Format | Yours | Locked in a platform | Word and Excel | Word, Excel, PowerPoint, Project, Visio |
The Consultant Package licence, in plain terms
Most “everything packs” are the same single-organisation licence at a lower price. That does not help a consultant: the constraint was never the price of the files, it was the right to reuse them. This licence is written for client delivery and ships inside the download as LICENCE-CONSULTANT.txt.
| You may | You may not |
|---|---|
| Use every document on as many client engagements as you like | Resell or redistribute the documents as templates, a library or a competing product |
| Adapt, rebrand and co-brand them as your own deliverables | Publish them publicly or post them for download |
| Leave the adapted documents with the client, permanently | Sub-licence the template rights to another consultancy |
| Keep using every document indefinitely — the licence is perpetual — and share it across your whole firm, including subcontractors working on your behalf | Give a client the raw library in place of a delivered engagement |
Honest notes
- These are documents, not certification. No pack passes an audit on its own. Every template carries placeholders that need your client’s real scope, risks and evidence.
- Nothing here has been reviewed or approved on your client’s behalf. Revision history and approval blocks are deliberately blank for you to complete.
- Standards references are accurate as at the issue date printed in each document. Where an edition is in transition we say so in the pack — you can always confirm the current status of a standard on ISO’s own catalogue.
- This is a documentation library, not software. There is no portal and no seat management, and the Consultant Package includes no AI writing tool.
- The Consultant Package does not include the licensed standards themselves. Your client still needs to buy any standard they are certifying against from ISO or their national standards body.
Frequently Asked Questions (FAQ)
What is the Consultant Package?
The Consultant Package is a single 1.1 GB download containing all 71 Governance Docs toolkits — 6,201 editable documents — under one perpetual, firm-wide licence that permits unlimited client engagements. It costs $1,399 once, with no subscription and nothing to renew, and includes 12 months of updates.
How many frameworks does it cover?
Seventy-one, listed in full above with the document count for each. That includes the frameworks generic compliance bundles usually skip — IATF 16949, AS9100, ISO 13485, EU MDR and IVDR, ISO 17025 and 15189, PCI DSS, HIPAA, CMMC, FedRAMP, TISAX, SWIFT CSP, Basel III, SAMA, MiCA and SOX — so a manufacturing, medical device, laboratory or financial services client does not send you looking for a second supplier.
Can my whole team use this, or just me?
Your whole firm. Any employee or contractor working on your firm’s engagements is covered by the one licence. There are no seats to manage.
Is there a limit on how many clients I can use it for?
No. The Consultant Package places no limit on client engagements, with no per-client fee and nothing to report to us.
Can my client keep the documents after the project ends?
Yes. Once you have adapted a document into a client deliverable, that client may keep and operate it indefinitely. What they do not receive is the right to redistribute it as a template or pass the library on.
What file formats are the documents in?
Microsoft Word and Excel for 5,795 of them, with 257 PowerPoint decks, 100 PDFs, 25 Microsoft Project plans and 18 Visio diagrams. Everything editable is unlocked and unwatermarked — no PDF-only deliverables, no proprietary format.
Do I have to renew, or pay anything again?
Nothing. The licence is perpetual and there is nothing to renew — no subscription, no recurring charge, no expiry on anything you have downloaded, and no loss of the right to keep using it on client work. The only thing that stops at 12 months is the flow of updates and newly published toolkits.
Do I get toolkits you publish later?
Any toolkit we publish during your 12-month update window is included at no extra cost.
How is it delivered?
The Consultant Package arrives as a single 1.1 GB download containing one folder per toolkit. Instant access on payment — use a desktop browser rather than a phone.
Can I buy a single toolkit instead?
Yes. Every toolkit is sold separately — most are $99, and the assessment tools start at $19 — but under a single-organisation licence. The Consultant Package is the version licensed for client work, and below about three toolkits, buying individually is cheaper.
What if it is not what I expected?
30-day refund, same as every other product we sell.
ISO 45001 Assessment Tool - Ultimate Solution 





