Shubham Raut

Playbooks PATH · मार्ग

How I actually run these.

Step by step methodologies behind every implementation. Not theory, the exact system I follow.

How I run an ISO 27001 implementation in 90 days

From kickoff to certification audit in 12 weeks. Covers gap assessment, risk methodology, documentation sprint, control implementation, internal audit, and management review, with exact deliverables at each stage.

How I run an ISO 42001 AI governance implementation

Standing up an AI management system from scratch. Covers AI inventory, impact assessment, AI risk methodology, policy development, and integration with existing ISO 27001 controls.

The 12 week shape

WK 1-2

Gap Assessment and Scoping

Current state, ISMS scope, interested parties.

WK 3-4

Risk Assessment

Risk methodology, identify and score risks, select treatments.

WK 5-8

Documentation Sprint

Policies, procedures, SoA, and supporting documents.

WK 9-10

Control Implementation

Implement and evidence Annex A controls.

WK 11

Internal Audit

Conduct audit, log findings, raise corrective actions.

WK 12

Management Review and Audit Prep

Management review, finalise evidence, brief for Stage 1.

These playbooks are the backbone of every engagement. Want to see one applied end to end?