Compliance documentation kits — ready to use, built for your scale.
CertiSME provides structured, auditor-ready compliance document packages for small and medium enterprises. Each kit is a standalone file download — no subscription, no portal, no lock-in.
Framework overview
Browse the framework kits below — each jumps to its document packs.
ISO 27001:2022
Information Security Management System (ISMS)
The international standard for managing information security risks. The 2022 revision introduces 93 controls across four themes — Organisational, People, Physical, and Technological. Relevant for any SME handling customer data, operating in regulated industries, or tendering for enterprise and government contracts.
View document packs →ISO 42001:2023
Artificial Intelligence Management System (AIMS)
The first international standard for responsible AI governance. Covers AI risk assessment, lifecycle controls, and ethical deployment obligations. Essential for SMEs building or deploying AI-powered products and services, particularly under emerging AI policy frameworks.
View document packs →NIST AI RMF
AI Risk Management Framework (NIST AI 100-1)
The US National Institute of Standards and Technology's voluntary framework for managing AI risk across the full system lifecycle. Organised around four core functions — GOVERN, MAP, MEASURE, MANAGE — it is widely adopted internationally and increasingly referenced in enterprise and government AI procurement requirements. Complements ISO 42001 and is suitable for SMEs supplying AI-enabled products or services to larger organisations.
View document packs →Frequently asked questions
What format are the files?
Policy bundles are delivered as Microsoft Word (.docx) files. Control registers and workbooks are delivered as Microsoft Excel (.xlsx) files. Larger kits are delivered as a single ZIP bundle containing all of the files. Both formats open in LibreOffice if you do not have Microsoft Office.
Are the documents pre-filled or blank templates?
Documents are structured and substantially pre-written. Policy sections are drafted with appropriate language for ISO compliance. You fill in your company name, appointed roles, specific dates, and any organisation-specific details indicated with [PLACEHOLDER] markers. They are not blank templates — meaningful work has already been done.
Will these documents get me certified?
No document kit alone will achieve certification. ISO certification requires an accredited certification body to audit your actual implementation. These kits give you the documentation foundation — which is a significant portion of the work — but you still need to implement the controls and undergo audit.
Are these documents updated when standards change?
Updates are released when the underlying standards are revised. Customers who have purchased a product are notified by email and can download the updated version at no charge.
How do I receive my files after purchase?
After successful payment via PayFast, you will be redirected to a download page where your files are available immediately.
Questions?
If you have questions about which kit is right for your business, or need a custom document set for a specific framework or industry, contact us at hello@certisme.co.za.