Checklists

Three checklists for finding the gaps

One walks the Swedish Cybersecurity Act requirement by requirement, in the order they took effect. One takes manufacturers through the Cyber Resilience Act in six steps. The third lists every document an ISO 27001 management system needs. All three are free, and built to be printed and worked through.

What you get

Three PDFs, ready to print

Cybersecurity Act readiness
Eight sections covering scope, registration, risk management, security measures, incident reporting, supply chain, management accountability and continuous compliance — each marked with the date its requirements took effect. Dates checked against NCSC and the Swedish Parliament.
Cyber Resilience Act readiness
Thirty-four requirements for manufacturers of hardware and software products in six steps, in the order they apply: products and scope, reporting since 11 September 2026, security by design, vulnerability handling, information to users, and conformity and documentation. Written from the regulation and the European Commission’s guidance.
The ISO 27001 document set
All thirty-one documents, split into management system documents and the policy set, plus the seven things each one needs before it counts as done — owner, version, approval, review date, distribution, acknowledgement and control linkage.

Where should we send them?

The files download immediately — no waiting for an email.

Please complete this required field.
Please complete this required field.
Please enter a valid business email address.
Please complete this required field.
Please complete this required field.
The rest of the library

There are another thirty of these

The full Policy Library ships inside Compeas, with version control, distribution and acknowledgement tracking built around it — so the policy stays maintained instead of ageing in a folder.

See the platform Book a demo