ISMS is an easy-to-use GRC tool that supports ISO 27001 compliance through a clean, intuitive interface. Navigation is straightforward, allowing users to quickly find and manage required documentation.

A key strength of the platform is its step-by-step guidance for creating ISO 27001 policies, which simplifies the normally complex compliance process and helps ensure all requirements are addressed. The interface is user-friendly and efficient for ongoing ISMS management.

Additionally, the ISMS staff are highly attentive and responsive, providing timely support and demonstrating strong knowledge of both the platform and ISO 27001. Overall, ISMS effectively streamlines ISO compliance efforts while offering excellent usability and support. Review collected by and hosted on G2.com.

While the ISMS platform performs well overall, there are some limitations that impact broader usability. The tool currently offers a limited number of integrations with the software suites we regularly use, which can result in additional manual effort when aligning data across systems. Expanding native integrations or API-based connectivity would improve automation and reduce administrative overhead.

Additionally, the cross-comparison and mapping between different certifications is not yet very clear. It is difficult to easily view overlapping controls or understand how activities and evidence can be reused across frameworks. Enhancing visibility into cross-framework alignment would significantly improve efficiency for organizations managing multiple compliance standards. Review collected by and hosted on G2.com.

The support and flexibility of the staff. The tool is very easy to use and when needed support is always available. It integrates well with our systems and the performance of the tool is top notch. AI support is also available, if needed. Review collected by and hosted on G2.com.

Currently I have not had any negative interactions with the product or the staff. No complaints. Review collected by and hosted on G2.com.

I like ISMS.online because it is a structured program that guides us through each step and assists with already written policies. I really appreciate the step-by-step process, support videos, and hints, as they assist us with getting going. The initial setup was very easy with assistance from the ISMS consultant. Review collected by and hosted on G2.com.

NOTHING SO FAR Review collected by and hosted on G2.com.

Feature-complete and user-friendly, with a UX that’s easy to navigate. It really helps us get through our audits more smoothly. Review collected by and hosted on G2.com.

Not much to add, really. They consistently listen to our feedback, and so far most of the smaller issues we’ve raised have been addressed. Review collected by and hosted on G2.com.

Its ability to simplify security and compliance management by bringing policies, risk management, assets, and audits into a single collaborative platform. Review collected by and hosted on G2.com.

For new users, it can feel overwhelming because of the many different features and workflows. As a result, the initial learning curve can be a little hard at first. Review collected by and hosted on G2.com.

Well structured data facilitates the navigation through the system. The support is very helpful and the tool is very responsive. Review collected by and hosted on G2.com.

The tool is good, but the marketing of the tool made us over confident that the 85% of the work done would make the remaining 15% a walk in the park. Review collected by and hosted on G2.com.

ISMS.online is easy to navigate, and the UI is user-friendly. The solution meets our needs by helping us track our certification goals and stay focused on achieving our organisation’s objectives. Review collected by and hosted on G2.com.

There are a few areas—particularly around risk management—that could be improved. For example, it would help to have a dedicated field to document the treatment plan, along with clearer risk status tracking and stronger reporting capabilities. Review collected by and hosted on G2.com.

ISMS.online has been most useful for ISO 27001 because it brings everything together in one structured place—risks, controls, policies, the SoA, audits, and evidence—so we can stay audit-ready at all times.

Customer support and onboarding are great too. Review collected by and hosted on G2.com.

It takes some time to get comfortable with the layout and overall logic, especially for people who are new to ISO 27001 or who only use the system occasionally. Review collected by and hosted on G2.com.

I like that ISMS.online makes everything easily organized and provides great helpful online tips. The tracking and time limit notifications are really useful for keeping things on schedule. I find the risk register calculation feature valuable, along with the legislation support. It helps control versions of documents easily and makes it easy for staff to reference them. Review collected by and hosted on G2.com.

I don't like that exporting the entire ISO27001 as a document is problematic. It would be better if there were multiple versions available to download, like a full version, a lighter one for staff, and an anonymized one for clients. Review collected by and hosted on G2.com.

The system provides excellent support for our structured work with information security. It helps us keep track of all requirements, offers clear guidance on how to meet them, and includes useful tools such as 2DOs, reminders, and incident and improvement management. Review collected by and hosted on G2.com.

I sometimes miss having the option to make certain customizations in specific modules and forms. Overall, it would be helpful to have a bit more flexibility in how those areas can be adjusted. Review collected by and hosted on G2.com.