ISMS.online Reviews & Product Details

I really liked the ARM section, that was very helpful in project planning the transition, and it kept me on schedule. I liked the way clauses and controls were split into importance through the phases of following the ARM. Luckily the tool was descriptive enough for me to interpret that I was migrating from the old system and updating to the new version, rather than starting from scratch. It had clarity.

My experience with the IO platform, and the people working at ISMS has all been very positive. We bought the tool to help the business transition to the ISO 27001 v2022, have a Spanish version (we have an office in Colombia) and long term plan of rolling out SOC 2 as well.

I really appreciated having the 'Legacy (v2013) controls and mapping' section because it did take a while for my head to get around and migrate away from v2013 to v2022. I used this section a lot. This obviously will become obsolete in time for new users to the standard, but it was extremely helpful to be able to use it. Overall I am really happy with the tool and appreciate that most of the hardwork has been taken out of such a boring subject, haha! Review collected by and hosted on G2.com.

Very little to dislike about the tool, but some wording I did not find intuitive like clusters or project (.i.e. referencing to the ISO 27001 as a whole) because in my head project means something else. But I can see you have some UI changes coming and this has been addressed, and I did notice though some of the help section graphics must have been from a previous version of the tool because not all of it married up to the live version. Review collected by and hosted on G2.com.

What I like most about ISMS.online is that it gives us a centralised, structured control environment for managing ISO 27001:2022 and ISO 27701:2019. As the Lead GRC Analyst at Hirevue, I need clear traceability between risks, controls, policies, audits, and corrective actions — and ISMS.online makes that connection easy to maintain and demonstrate.

It’s particularly strong for proactive risk management, not just audit preparation. The platform helps us manage our risk register, track improvements, maintain policy lifecycle reviews, and evidence compliance in a way that’s organized and defensible. It has significantly reduced audit friction and improved governance visibility across the business. Review collected by and hosted on G2.com.

ISMS.online is a comprehensive platform, which is a real strength, but that depth can sometimes make certain areas feel less intuitive for new users. There can be a bit of a learning curve when first navigating the relationships between risks, controls, and policies, particularly for team members who aren’t deeply familiar with ISO frameworks.

However, once processes are embedded and users are familiar with the structure, it becomes a very effective and reliable governance tool. Review collected by and hosted on G2.com.

I like that with ISMS.online, I can interlink different modules, which makes managing everything much easier. The ability to reuse aspects, such as the risk management tools or security incident management tools, is really valuable. It makes adhering to various standards and allowing auditors to see how we're certified a lot simpler. Using the platform as a central focus point to manage our standards is quite efficient, and it's easy to use. Review collected by and hosted on G2.com.

The user interface can be quite clunky sometimes. The notification system can also be quite clunky using email. I'd prefer there to be maybe a Teams or a Slack interface for notifications. Review collected by and hosted on G2.com.

What I like best about ISMS.online is the clear structure it provides for implementing and maintaining an ISO 27001-compliant ISMS. The templates, workflows, and centralised system make it much easier to manage policies, risks, and audit evidence, especially for smaller teams.

However, the platform can feel somewhat rigid and occasionally requires workarounds to fit specific business needs. Some of the guidance is also quite generic, so a level of internal expertise is still needed to apply it effectively.

Overall, it’s a useful tool for achieving and maintaining compliance, but not without some limitations. Review collected by and hosted on G2.com.

One of the main drawbacks of ISMS.online is that it can feel quite rigid when trying to tailor it to specific or more complex business processes. Some features are not as flexible as expected, which can lead to manual workarounds or duplication of effort. The interface can also feel slightly cluttered at times, making navigation less intuitive than it could be. Additionally, while the guidance is helpful, it can be quite generic and doesn’t always translate directly into practical, real-world implementation without additional interpretation. Review collected by and hosted on G2.com.

BOWP2026 I use ISMS.online for managing ISO 14001 certification. I really like that all the documentation and evidence are kept in one place with ISMS.online, which makes it accessible to key owners. It's great that it also reminds us when to update evidence, which is important when we have our audits. Linking documents in our company MS SharePoint from ISMS.online is something I find useful. Review collected by and hosted on G2.com.

I don't like that we had to set up our own ISO 14001 cluster. Access to a pre-populated ISO 14001 cluster with up-to-date clauses would be a great improvement. Review collected by and hosted on G2.com.

The customer service help is outstanding, queries are replied to quickly, professionally and always resolved. The platform is making management of our ISO compliance evidence much easier. The platform is constantly evolving and getting improved on a regular basis. Review collected by and hosted on G2.com.

I feel the audit capability of the platform is a bit lacking. At the moment it's just a table to complete and I feel the platform has the potential to make it more interactive. Review collected by and hosted on G2.com.

I really appreciate ISMS.online for helping us clearly document and track our alignment with ISO27001 in a well-structured and easy-to-navigate way. Their customer support is brilliant, guiding us through everything and making onboarding seamless. I find the interface user-friendly and easy to navigate. They maintain constant improvement, keeping their system up to date. The way they align with the standards our company complies with makes compliance easier to maintain. Their helpful customer support ensures we are confident to ask questions and helps us uphold our compliance and stay updated. The user-friendly interface ensures our policies, controls, and processes are well documented, aligning with our company standards. With their support, the initial setup was really easy, and I'm happy with how centralised and well-organized everything is, which boosts our confidence in audit processes. Review collected by and hosted on G2.com.

ISMS.online does well with reporting and I think maybe a minor improvement could be more customization possibilities when exporting policies or documentation or reports. Review collected by and hosted on G2.com.

ISMS.online is a wonderful tool for regulatory audits, it's made the process significantly easier. Their IT team is wonderful to work with on any issues and improvement suggestions for the system - special shoutout to Dan and Mike for being extra great. They are always releasing updates and continuously investing in their system which I appreciate. The system covers several standards that makes it easy to keep everything ISO in one system vs several.

8392 Review collected by and hosted on G2.com.

I do wish you could set up structures and tracks with templates and that iframe coding was available to embed videos on how to complete certain processes throughout the system. Review collected by and hosted on G2.com.

I like that ISMS.online is very user friendly and colorful, making it easy and quick to get used to. It has a framework that works well for us, especially for ISO certification. I appreciate how it allows us to work together on a SharePoint, even with colleagues outside the office, and how all the files we need can be found in the same place. It's a very nice tool, and using it allows us to work much quicker than without it. Review collected by and hosted on G2.com.

I don't see any point of improvement from my point of view. But my colleague from IT might find the settings may be improved so that we can find them more easily than what it's proposed for now. Review collected by and hosted on G2.com.

I like that ISMS.online makes everything easily organized and provides great helpful online tips. The tracking and time limit notifications are really useful for keeping things on schedule. I find the risk register calculation feature valuable, along with the legislation support. It helps control versions of documents easily and makes it easy for staff to reference them. Review collected by and hosted on G2.com.

I don't like that exporting the entire ISO27001 as a document is problematic. It would be better if there were multiple versions available to download, like a full version, a lighter one for staff, and an anonymized one for clients. Review collected by and hosted on G2.com.