// Toolkits.jsx — Implementation Toolkits detail
const { V: VT, MAXW: MWT, FONT: FTT } = window;
const TOOLKIT_PARTS = [
['doc', 'Policy libraries', 'Pre-built, framework-aligned policy and procedure sets, tailored to your organization, industry, and risk appetite.'],
['cpu', 'Control templates', 'Ready-to-deploy control templates mapped directly to certification requirements — no starting from a blank page.'],
['file', 'Evidence management procedures', 'Repeatable procedures so evidence is generated by the process itself, not collected in a scramble before the audit.'],
['users', 'Staff awareness programs', 'Role-based training and security awareness material to build a compliance-ready culture across the organization.'],
['clipboard', 'Audit-readiness checklists', 'Framework-specific checklists that keep you continuously prepared for surveillance and recertification.'],
['network', 'Cross-framework control mapping', 'Shared evidence across ISO 27001, SOC 2, CMMC, and NIST — pursue multiple certifications without duplicating effort.'],
];
const ToolkitsPage = ({ onNav }) => (
The toolkit that turns
gaps into certification.>}
sub="Our core service line and the engine of Compliance by Design. A structured, practitioner-led program that closes the gaps from your readiness assessment — and embeds controls into how you actually operate." >
onNav('contact')}>Scope a Toolkit
onNav('services')}>See the full lifecycle
{/* Engagement facts */}
{[['3–9 months', 'Typical engagement'], ['Lead Consultant + SMEs', 'Per control domain'], ['USD 20K–120K', 'Indicative fee'], ['Core revenue line', 'Most clients engage here']].map(([v, l], i) => (
{v}
{l}
))}
{/* What's inside */}
{TOOLKIT_PARTS.map(([icon, t, d], i) => (
))}
{/* Framework-specific toolkits */}
{window.STANDARDS.map(s => {
const hasToolkit = s.id === 'iso27001' || s.id === 'iso42001' || s.id === 'soc2' || s.id === 'cmmc' || s.id === 'hitrust' || s.id === 'cmmi' || s.id === 'nist';
return (
onNav(hasToolkit ? 'toolkit:' + s.id : 'standard:' + s.id)}
style={{ background: '#fff', border: `1px solid ${VT.g200}`, borderRadius: 12, padding: '24px', cursor: 'pointer', transition: 'all 150ms' }}
onMouseEnter={e => { e.currentTarget.style.borderColor = s.color; e.currentTarget.style.transform = 'translateY(-2px)'; e.currentTarget.style.boxShadow = '0 8px 28px rgba(0,0,0,0.08)'; }}
onMouseLeave={e => { e.currentTarget.style.borderColor = VT.g200; e.currentTarget.style.transform = 'none'; e.currentTarget.style.boxShadow = 'none'; }}>
{hasToolkit
?
Toolkit ready
:
}
{s.name} Toolkit
{s.short}
{hasToolkit &&
Explore the toolkit
}
);
})}
{/* Cross-framework mapping highlight */}
Cross-framework control mapping
Certify once. Reuse everywhere.
Most frameworks share underlying controls. Our cross-framework mapping lets clients pursuing multiple certifications share evidence and reduce duplication of effort — so a NIST 800-171 control can do double duty for CMMC, and an ISO 27001 control supports your SOC 2 report.
{['Pursue ISO 27001 and CMMC and NIST with one partner', 'Map a single control to several frameworks at once', 'Lower total cost of compliance across your roadmap'].map((t, i) => (
{t}
))}
One control, many frameworks
Access Control · MFA
One implemented control, mapped to:
{[['NIST 800-171', VT.g500], ['CMMC 2.0', VT.orange], ['ISO 27001', VT.purpleLight], ['SOC 2', VT.purpleLight], ['HITRUST', VT.orangeLight]].map(([n, c], i) => (
{n}
))}
Evidence collected once, accepted across all five.
{/* Methodology / Compliance by Design */}
{[
['compass', 'Design', 'We redesign processes so framework requirements are met as a natural outcome of daily work.'],
['layers', 'Embed', 'Controls are implemented inside operational workflows, not layered on top as paperwork.'],
['activity', 'Generate', 'Evidence exists because the process produces it — continuously, not for the auditor.'],
['refresh', 'Sustain', 'A lighter maintenance burden keeps you audit-ready between certifications, year after year.'],
].map(([icon, t, d], i) => (
))}
);
Object.assign(window, { ToolkitsPage });