Development of ISO 27001 & ISO 20000-1 Documentation

We are looking for an experienced ISO consultant or technical writer to develop system documentation for ISO 27001 (Information Security Management System) and ISO 20000-1 (IT Service Management System).

• The client already has implemented an Integrated Management System (IMS) and Business Continuity Management (BCM – ISO 22301).
• We need only the minimum required documents and records related to ISO 27001:2022 & ISO/IEC 20000-1:2018.

Required Deliverables:

Procedures / Policies:
• Asset Management & Information Classification Procedure
• Access Control Procedure
• Backup & Restore Procedure
• Information Security & IT Service Incident Management Procedure
• Change Management Procedure
• Disaster Recovery Plan (DRP)
• Service Catalogue
• Service Level Agreements (SLAs) / Operational Level Agreements (OLAs)
Registers / Forms / Logs:
• Asset Inventory Register
• Access Control & User Privilege Register
• Incident & Security Event Log
ISO 27001 Annex A Mandatory Controls Documentation:
• A.5 Information Security Policies
• A.6 Organization of Information Security
• A.7 Human Resource Security
• A.8 Asset Management
• A.9 Access Control
• A.12 Operations Security
• A.16 Information Security Incident Management
• A.17 Information Security in Business Continuity (aligned with ISO 22301)


Requirements for Freelancers:
• Proven experience in ISO 27001 and/or ISO 20000-1 documentation.
• Ability to deliver practical, audit-ready templates (Word format).
• Samples of previous work will be an advantage.

Deliverable Format:
• Editable Word documents (.docx)
• English language
Deadline & Budget:
• Maximum 2 weeks.
• Priority for freelancers with fast delivery and high-quality documentation.