---
title: Policies, Audit Evidence & Awareness | Axil Tech
description: "The documents, evidence and training that auditors, insurers and customers ask for: a practical policy set and ISMS documentation, hands-on help with audit…"
image: https://www.axiltech.com.au/hubfs/logo-png/axil-tech-logo-colour-share.png
---

[Skip to content](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#main-content)

![Axil Tech](https://www.axiltech.com.au/hubfs/axil-tech-logo-colour.svg)Homepage

- [Home](https://www.axiltech.com.au?hsLang=en-au)
- [Services](https://www.axiltech.com.au/start-here?hsLang=en-au)
  
    - [Network & Security](https://www.axiltech.com.au/services/network-security?hsLang=en-au)
    - [Wireless Design](https://www.axiltech.com.au/services/wifi?hsLang=en-au)
    - [Governance, Risk & Compliance](https://www.axiltech.com.au/services/governance-risk-compliance?hsLang=en-au)
    - [Cloud, Microsoft 365 & Identity](https://www.axiltech.com.au/services/cloud-microsoft-365?hsLang=en-au)
    - [Resilience & Incident Readiness](https://www.axiltech.com.au/services/resilience?hsLang=en-au)
    - [Retainers & vCISO](https://www.axiltech.com.au/services/ongoing-support?hsLang=en-au)
- [Post-Quantum](https://www.axiltech.com.au/services/post-quantum?hsLang=en-au)
- [Accreditations](https://www.axiltech.com.au/accreditations?hsLang=en-au)
- [Resources](https://www.axiltech.com.au/resources/cyber-insurance-checklist?hsLang=en-au)
- [Contact](https://www.axiltech.com.au/contact?hsLang=en-au)

[Get started](https://www.axiltech.com.au/start-here?hsLang=en-au)

- [Home](https://www.axiltech.com.au?hsLang=en-au)
- [Services](https://www.axiltech.com.au/start-here?hsLang=en-au)
  
    - [Network & Security](https://www.axiltech.com.au/services/network-security?hsLang=en-au)
    - [Wireless Design](https://www.axiltech.com.au/services/wifi?hsLang=en-au)
    - [Governance, Risk & Compliance](https://www.axiltech.com.au/services/governance-risk-compliance?hsLang=en-au)
    - [Cloud, Microsoft 365 & Identity](https://www.axiltech.com.au/services/cloud-microsoft-365?hsLang=en-au)
    - [Resilience & Incident Readiness](https://www.axiltech.com.au/services/resilience?hsLang=en-au)
    - [Retainers & vCISO](https://www.axiltech.com.au/services/ongoing-support?hsLang=en-au)
- [Post-Quantum](https://www.axiltech.com.au/services/post-quantum?hsLang=en-au)
- [Accreditations](https://www.axiltech.com.au/accreditations?hsLang=en-au)
- [Resources](https://www.axiltech.com.au/resources/cyber-insurance-checklist?hsLang=en-au)
- [Contact](https://www.axiltech.com.au/contact?hsLang=en-au)

[Get started](https://www.axiltech.com.au/start-here?hsLang=en-au)

[Home](https://www.axiltech.com.au/?hsLang=en-au)›[Services](https://www.axiltech.com.au/start-here?hsLang=en-au)›[Governance, Risk & Compliance](https://www.axiltech.com.au/services/governance-risk-compliance?hsLang=en-au)›Policies, Audit Evidence & Awareness

# Policies, Audit Evidence & Awareness

The documents, evidence and training that auditors, insurers and customers ask for: a practical policy set and ISMS documentation, hands-on help with audit evidence, and a security awareness program designed for your people.

[Book a 15-minute call](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#book)

## 3 services on this page

### Security Policy & ISMS Documents

A practical security policy set and ISMS documentation, written for how your organisation actually works.

**Typical duration:** 3–4 weeks

[See scope](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#security-policy-and-isms-documents)

### Audit Evidence & Compliance Support

Hands-on help collecting and organising the evidence auditors, customers and insurers ask for, and support through the audit itself.

**Typical duration:** 2–4 weeks

[See scope](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#audit-evidence-and-compliance-support)

### Security Awareness Program Design

A security awareness program designed for your people and risks: training plan, phishing simulation approach and measures.

**Typical duration:** 2 weeks

[See scope](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#security-awareness-program-design)

## Security Policy & ISMS Documents

A practical security policy set and ISMS documentation, written for how your organisation actually works.

**Who it's for:** Organisations preparing for ISO 27001, SMB1001 or customer due diligence.  
**Typical duration:** 3–4 weeks  
**Price:** typically A$14,350–26,000 ex GST  
**Backed by:** CISSP (see [what these accreditations mean](https://www.axiltech.com.au/accreditations?hsLang=en-au))

### Includes

- Policy framework and up to 12 core policies
- Supporting procedures and templates
- One review round with your team

### Size limits

- One organisation

### Excludes

- Implementing the controls the policies require
- Certification

### Client provides

- Existing policies and procedures
- A named contact, and time with process owners for the review round

**Fixed price for the scope listed; anything beyond is quoted before it starts.**

**Related services:** [SMB1001 Certification Readiness](https://www.axiltech.com.au/services/governance-risk-compliance/smb1001-certification-readiness?hsLang=en-au) · [ISO 27001 Internal Audit](https://www.axiltech.com.au/services/governance-risk-compliance/iso-27001-internal-audit?hsLang=en-au) · [Audit Evidence & Compliance Support](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#audit-evidence-and-compliance-support)

Most customers follow this with [ISO 27001 Internal Audit](https://www.axiltech.com.au/services/governance-risk-compliance/iso-27001-internal-audit?hsLang=en-au).

[Book a 15-minute call](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#book)

## Audit Evidence & Compliance Support

Hands-on help collecting and organising the evidence auditors, customers and insurers ask for, and support through the audit itself.

**Who it's for:** Organisations facing an ISO 27001, SMB1001, Essential Eight or customer audit.  
**Typical duration:** 2–4 weeks  
**Price:** typically A$10,250–18,500 ex GST

### Includes

- Evidence requirements mapped to the audit scope
- Evidence collected, organised and gap-flagged
- Support during audit interviews (up to 1 day)

### Size limits

- One audit framework, up to 40 controls

### Excludes

- Implementing missing controls
- Acting as the certifying auditor

### Client provides

- Existing policies and evidence, and time with control owners
- Each additional audit support day: A$2,000 ex GST

**Fixed price for the scope listed; anything beyond is quoted before it starts.**

**Related services:** [ISO 27001 Internal Audit](https://www.axiltech.com.au/services/governance-risk-compliance/iso-27001-internal-audit?hsLang=en-au) · [SMB1001 Certification Readiness](https://www.axiltech.com.au/services/governance-risk-compliance/smb1001-certification-readiness?hsLang=en-au) · [Security Policy & ISMS Documents](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#security-policy-and-isms-documents)

Most customers follow this with [Virtual CISO (vCISO)](https://www.axiltech.com.au/services/ongoing-support/virtual-ciso-vciso?hsLang=en-au).

[Book a 15-minute call](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#book)

## Security Awareness Program Design

A security awareness program designed for your people and risks: training plan, phishing simulation approach and measures.

**Who it's for:** Organisations needing awareness training for insurers, SMB1001 or customers.  
**Typical duration:** 2 weeks  
**Price:** from A$5,800 ex GST

### Includes

- Program design and annual calendar
- Phishing simulation approach
- Metrics and reporting

### Size limits

- One organisation

### Excludes

- Training platform licences
- Delivering training sessions

### Client provides

- An HR or communications contact and any existing training records
- Each live training session (up to 60 minutes, online): A$1,500 ex GST
- Running phishing simulations on your platform: A$500 per month ex GST

**Fixed price for the scope listed; anything beyond is quoted before it starts.**

**Related services:** [Incident Response Plan](https://www.axiltech.com.au/services/resilience/incident-response-plan?hsLang=en-au) · [SMB1001 Certification Readiness](https://www.axiltech.com.au/services/governance-risk-compliance/smb1001-certification-readiness?hsLang=en-au) · [Cyber Insurance Readiness Check](https://www.axiltech.com.au/services/governance-risk-compliance/cyber-insurance-readiness-check?hsLang=en-au)

Most customers follow this with [Incident Response Plan](https://www.axiltech.com.au/services/resilience/incident-response-plan?hsLang=en-au).

[Book a 15-minute call](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#book)

## Book a 15-minute call

Tell us what prompted the enquiry. We will confirm the scope and give you a fixed price before any work starts.

Prefer email? [hello@axiltech.com.au](mailto:hello@axiltech.com.au) or [send an enquiry](https://www.axiltech.com.au/contact?hsLang=en-au). Want every service and its scope in one document? [Request the service catalogue](https://www.axiltech.com.au/catalogue?hsLang=en-au).

![Axil Tech](https://www.axiltech.com.au/hubfs/axil-tech-logo-reversed.svg "Axil Tech")

- [Home](https://www.axiltech.com.au?hsLang=en-au)
- [Start Here](https://www.axiltech.com.au/start-here?hsLang=en-au)
- [Accreditations](https://www.axiltech.com.au/accreditations?hsLang=en-au)
- [Contact](https://www.axiltech.com.au/contact?hsLang=en-au)
- [Privacy policy](https://www.axiltech.com.au/privacy?hsLang=en-au)

<https://www.linkedin.com>

Axil Tech Pty Ltd · ABN 87 661 578 203 · Australia-wide · remote-first · +61 7 4700 1300 · hello@axiltech.com.au 

---

© 2026. All rights reserved.

```json
{
  "@context" : "https://schema.org",
  "@type" : "Service",
  "areaServed" : {
    "@type" : "Country",
    "name" : "Australia"
  },
  "description" : "A practical security policy set and ISMS documentation, written for how your organisation actually works.",
  "name" : "Security Policy & ISMS Documents",
  "provider" : {
    "@type" : "ProfessionalService",
    "areaServed" : {
      "@type" : "Country",
      "name" : "Australia"
    },
    "email" : "hello@axiltech.com.au",
    "legalName" : "Axil Tech Pty Ltd",
    "name" : "Axil Tech",
    "taxID" : "87 661 578 203",
    "telephone" : "+61-7-4700-1300",
    "url" : "https://www.axiltech.com.au"
  },
  "serviceType" : "Governance, Risk & Compliance",
  "url" : "https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#security-policy-and-isms-documents"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "Service",
  "areaServed" : {
    "@type" : "Country",
    "name" : "Australia"
  },
  "description" : "Hands-on help collecting and organising the evidence auditors, customers and insurers ask for, and support through the audit itself.",
  "name" : "Audit Evidence & Compliance Support",
  "provider" : {
    "@type" : "ProfessionalService",
    "areaServed" : {
      "@type" : "Country",
      "name" : "Australia"
    },
    "email" : "hello@axiltech.com.au",
    "legalName" : "Axil Tech Pty Ltd",
    "name" : "Axil Tech",
    "taxID" : "87 661 578 203",
    "telephone" : "+61-7-4700-1300",
    "url" : "https://www.axiltech.com.au"
  },
  "serviceType" : "Governance, Risk & Compliance",
  "url" : "https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#audit-evidence-and-compliance-support"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "Service",
  "areaServed" : {
    "@type" : "Country",
    "name" : "Australia"
  },
  "description" : "A security awareness program designed for your people and risks: training plan, phishing simulation approach and measures.",
  "name" : "Security Awareness Program Design",
  "provider" : {
    "@type" : "ProfessionalService",
    "areaServed" : {
      "@type" : "Country",
      "name" : "Australia"
    },
    "email" : "hello@axiltech.com.au",
    "legalName" : "Axil Tech Pty Ltd",
    "name" : "Axil Tech",
    "taxID" : "87 661 578 203",
    "telephone" : "+61-7-4700-1300",
    "url" : "https://www.axiltech.com.au"
  },
  "serviceType" : "Governance, Risk & Compliance",
  "url" : "https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#security-awareness-program-design"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "BreadcrumbList",
  "itemListElement" : [ {
    "@type" : "ListItem",
    "item" : "https://www.axiltech.com.au/",
    "name" : "Home",
    "position" : 1
  }, {
    "@type" : "ListItem",
    "item" : "https://www.axiltech.com.au/start-here",
    "name" : "Services",
    "position" : 2
  }, {
    "@type" : "ListItem",
    "item" : "https://www.axiltech.com.au/services/governance-risk-compliance",
    "name" : "Governance, Risk & Compliance",
    "position" : 3
  }, {
    "@type" : "ListItem",
    "item" : "https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness",
    "name" : "Policies, Audit Evidence & Awareness",
    "position" : 4
  } ]
}
```