Markdown Editor
Ouvrir l'éditeur

Kit confiance client SMSI

Transformer votre SMSI en confiance client : livre blanc sécurité et trust center, usage de la marque de certification, bibliothèque de réponses aux questionnaires, correspondances de contrôles, avenant sécurité, NDA et accords fournisseurs.

8 modèles en 3 étapes, dans l'ordre d'utilisation. Ouvrez un modèle dans l'éditeur, complétez-le et exportez-le en PDF, DOCX ou HTML.

Étape 1

Confiance client

  1. Security Whitepaper and Trust Centre Template (ISO/IEC 27001)

    Complet

    Publication rules, what never to publish, gated documents, approval workflow, trust centre page blocks, whitepaper sections, certification wording, sub-processors, security.txt

    ISO/IEC 27001:2022 7.4, A.5.1, A.5.12, A.5.14, A.5.34 (cited only); ISO/IEC 27002:2022; RFC 9116

  2. Certification Mark Usage Rules Template (ISO/IEC 27001)

    Complet

    Certificate and CB mark use: rule sources, licensed marks, scope-limited claims, prohibited uses, channels, wording examples, approval log

    ISO/IEC 27001:2022 + Amd 1:2024 clause 7.4 (cited only); ISO/IEC 17021-1:2015 clause 8.3; CB and accreditation rules
Étape 2

Questionnaires de sécurité

  1. Security Questionnaire Answer Library Template (CAIQ, SIG, ISO/IEC 27001)

    Complet

    Answer owners, honest answer rules, CCM v4.1 domain index mapped to Annex A, answer record format, approved answers, sharing tiers and NDA gating, workflow, review triggers

    ISO/IEC 27001:2022 7.4, 7.5, A.5.12, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; CSA CAIQ v4.1 and SIG (names only)

  2. Control Framework Crosswalk Template (ISO 27001, NIST CSF, SOC 2, NIS2, DORA)

    Complet

    88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

    ISO/IEC 27001:2022 + Amd 1:2024 clauses 4 to 10 and Annex A (cited only); NIST CSF 2.0; AICPA TSC 2017 (IDs only); NIS2; DORA; CIS Controls v8.1 (names only)

  3. SOC 2 Control Mapping Template

    Complet

    All 61 SOC 2 criteria (CC1-CC9, A, C, PI, P), Type 1 vs Type 2, DC 200 system description, CUEC/CSOC, gap register, evidence and sampling

    AICPA 2017 TSC (rev. points of focus 2022); DC 200 (2018, rev. 2022)
Étape 3

Contrat

  1. Customer Security Addendum Template (ISO/IEC 27001 A.5.20)

    Complet

    Order of precedence, certifications upkeep, personnel, sub-processors, data location, incident notification, audit rights, testing, deletion, liability pointer, negotiation playbook

    ISO/IEC 27001:2022 A.5.14, A.5.20, A.5.31, A.5.34 (cited only); ISO/IEC 27002:2022; ISO/IEC 27036-2:2022

  2. Confidentiality Agreement Template (ISO/IEC 27001 A.6.6)

    Complet

    Confidentiality requirements analysis, five agreement variants, signing gate, register, review, model clauses incl. protected disclosures and return

    ISO/IEC 27001:2022 A.6.6 (cited only); ISO/IEC 27002:2022

  3. Supplier Security Agreement Template (ISO/IEC 27036, A.5.20)

    Complet

    Security schedule for supplier contracts: clauses by tier, audit rights, incident notice, sub-contractors, data location, ICT supply chain, exit, deviations

    ISO/IEC 27001:2022 A.5.19 to A.5.22 (cited only); ISO/IEC 27036-2:2022; ISO/IEC 27036-3:2023