Toolkit content

The main difference between these three documents are:
- Risk Assessment and Risk Treatment Methodology Cloud covers not only requirements for ISO 27001, but also specific requirements applicable for cloud environments defined by ISO 27017 and for Personal Identifiable Information PII) defined by ISO 27018.
- Risk Assessment and Risk Treatment Methodology Premium covers not only requirements for ISO 27001, but also specific requirements applicable for business continuity defined by ISO 22301.
- Risk Assessment and Risk Treatment Methodology Integrated covers not only requirements for ISO 27001 but also specific requirements applicable for the protection of personal data defined EU GDPR.

You can see the specific requirements covered in each document in its own section 2 - Reference Documents.

Please note that these are slightly differences included to ensure the right references are included for each document, related to cloud, business continuity, and GDPR, but they practically do not have an impact on the methodology itself.