ISMS.online has been useful for managing all our information security documents, assessing risks, and tracking incidents and threats. When we first started working toward ISO 27001, the template policies helped save us a lot of time. We also use policy packs to share key information with employees and provide evidence for audits.

On the suggestion of our account manager, we recently set up the Slack integration, which means we can see items added to tracks instantly. Auditors seem to get on well with most aspects of the platform, and many have experience using it already, which helps. Review collected by and hosted on G2.com.

It took a long time to understand how the different components fit together and the best way to use the system. The UX is not great, and some members of our team really struggle to work out how to find different parts of the platform.

Assigning roles across all the different sections of the system is also a challenge, as is making sure everyone has the access they need when they need it. For a small company (~25), the pricing is also quite steep, as you pay for the platform and then an additional amount for each user.

Expanding the integrations would really help us, especially integration with Google Docs and more capabilities for the Slack integration. Review collected by and hosted on G2.com.

We utilize ISMS.Online for our ISO 27001 compliance. ISMS.Online breaks down the regulation into each separate requirement and you are able to add what you do to satisfy the requirement and attach any policies or documents to the requirement. When an auditor comes in it allows you to show what you are doing for each requirements. Our auditors have loved how organized we are and say that they are going to recommend ISMS.Online to their other customers.

We also utilize ISMS.Online for our ISMS, using the tool to track CAPA's, Incidents, Security risks, etc. We also utilize ISMS.Online for our weekly ISMS meetings and quarterly management reviews. ISMS.Online also has a great risk management section for tracking and reviewing risks. Review collected by and hosted on G2.com.

Each regulation is a seperate module and the modules do not share data. We upgraded from ISO 27001:2013 to ISO 27001:2022 and had to update all the data. The company did help with the initial import of data, but I have been told that if we purchased the HIPAA module, it would not share data with the ISO modules. Review collected by and hosted on G2.com.

I like that ISMS.online brings the entire ISMS into one place. It makes it much easier to collaborate across the organisation, stay on top of tasks, and ensure everyone has a single, accurate view of controls and risks.

ISMS.online has also been consistently reliable for me. I’ve never had any issues with the platform or with support. Everything loads quickly, and support always responds in a timely manner. Review collected by and hosted on G2.com.

Overall, the platform is good. However, one area that ISMS.online could improve is making the platform more flexible and customizable for users.

For example, at the moment, making changes in the SoA and Risks & Treatments modules can take a long time because we have to open and update each entry individually to apply a change. If there were an option to edit entries directly from the list view - similar to what’s possible in the Corrective Actions & Improvements and Policies & Controls modules - it would make the platform significantly better and more efficient to use. Review collected by and hosted on G2.com.

Excellent customer support. Joined up solution with good integration between policies/controls, risks, assets, and other items Review collected by and hosted on G2.com.

Imposes a rigid 3 level hierarchy on the content which is probably a legacy from the tools origins. Sometimes requires some compromises in organising/structuring content to fit within this. Review collected by and hosted on G2.com.

What we value most about ISMS.online is the way it brings our compliance and governance work into one central, structured platform. It has been instrumental in supporting our ISO 27001 and ISO 9001 certification journeys, offering clear guidance, helpful templates, and straightforward evidence management throughout the process.

Beyond certification, ISMS.online has become a core part of our day-to-day governance framework. We use it to manage policy packs, maintain our risk register, track compliance activities, and demonstrate continual improvement across the business. The platform is intuitive and well organised, and it helps ensure key information remains accessible, up to date, and consistently maintained.

Overall, the combination of practical compliance tools, audit readiness support, and ongoing governance capabilities has made ISMS.online a valuable asset for strengthening our management systems and reducing the administrative burden that comes with maintaining certification standards. Review collected by and hosted on G2.com.

While ISMS.online is a strong platform overall, some parts can feel less intuitive than others, especially when moving between modules or trying to find specific information. For new users, there can be a bit of a learning curve, and certain workflows still feel like they could be streamlined further to improve efficiency and overall usability. Review collected by and hosted on G2.com.

That it gives us a centralised, controlled environment for managing ISO 27001:2022.

It’s been a great place to store our policies alongside our other company policies. The policy packs, together with the ability to see what people have viewed, have been particularly useful for us.

The system has also been reliable, and we’ve been using it for a number of years now without issues.

Whilst it is a more expensive product, we appreciate the ability to add (at a cost) additional frameworks. Review collected by and hosted on G2.com.

Navigating the platform can feel clunky and non-intuitive, and it takes a significant amount of time to learn. If you use it frequently, that’s less of an issue, but for senior business leaders who log in more sporadically, the experience could be much easier. Review collected by and hosted on G2.com.

Before ISMS, we had implemented our ISO9001 on SharePoint using a set of versioned documents, spreadsheets, and forms. It was a constant struggle to maintain, to ensure compliance, and to drive adoption across the organisation.

ISMS changed all of that. It has proven critical for us in supporting the ISO9001 processes at DOPE. It helps with the detailed and complex tasks by keeping everything streamlined and clear, providing a practical and much easier way to follow the process and get things done.

While some effort is needed at the start to set it up and learn the interface, it quickly becomes intuitive and is pretty easy for the whole team to use. Review collected by and hosted on G2.com.

It is a full featured platform covering compliance management focusing on the managers of the policies.

The rest of the stakeholders within an organisation can view published policy packs relevant to them and mark them as "read", yet ISMS stops there.

As nice to have features, that from my POV would position ISMS as a more complete suite in their domain, I would love to see an expansion of features opening up also to this audience within an organisation.

For example:

- Customisable User Forms to initiate tasks such as Supplier Evaluation Requests or CAR requests

- a way employees can see and search through Rosters (i.e. Suppliers/Accounts)

- Org Chart / Flow Chart building functionality Review collected by and hosted on G2.com.

The control navigation and the pre determined structure makes it easy adoption and implementation of ISO 27001 Review collected by and hosted on G2.com.

Sometimes it is hard to navigate and understand how projects are created. This is the interfacing issue. Review collected by and hosted on G2.com.

I really like ISMS.online's interface and its ability to link work effectively. The centralized repository is great for managing documentation for multiple compliance frameworks, which I find very useful. I also think the risk assessment tools are pretty robust, and the overall platform is robust and fit into our budget well. Review collected by and hosted on G2.com.

The PCI DSS framework in ISMS.online isn't as strong as the ISO 27001 framework, which required us to do a bunch of customizations to adapt it properly. Review collected by and hosted on G2.com.

What I like most about ISMS.online is that it provides a structured, central place to manage our ISMS and makes it much easier to prepare for ISO 27001 audits. The interface is clean and intuitive, so it’s easy to find documents, manage risks, and collect evidence. Performance has been reliable, and the onboarding resources and support team were responsive whenever we needed guidance. While the platform is on the more expensive side, it has helped us standardize our compliance processes and save time, making it a worthwhile investment overall.mpliance. We haven’t relied extensively on integrations, but the platform works well as the central hub for our ISMS. Additional integrations and more automation would be a welcome enhancement as our compliance processes continue to mature. Review collected by and hosted on G2.com.

ISMS.online is a comprehensive platform, but that also means there is a learning curve and some workflows require more clicks than I’d like. The pricing is on the higher side, particularly for smaller organizations, although the value is there if you’re fully committed to maintaining an ISMS. I’d also like to see more AI capabilities, such as helping draft policies, summarize audit evidence, recommend risk treatments, and identify gaps in documentation. Features like these would make the platform even more efficient and reduce manual effort. Review collected by and hosted on G2.com.