At the last two customers I had the opportunity to base the full ISO 9001 / ISO 27001 / privacy and other security pages on Confluence / JIRA.
The ISO auditors were impressed that everything was clickable inclusing links to external tools for logging, monitoring and other content.
At the moment I am preparing Insight assetmanagement as part of ISO / privacy. So, if there are questions about one of these issues, you can contact me.