HomeSecurityISO/IEC 27001:2022 Gap Analysis

🔐 ISO/IEC 27001:2022 gap analysis

Self-assess your information-security management system against ISO/IEC 27001:2022 — score ISMS clauses 4–10 and all 93 Annex A controls (Organizational, People, Physical, Technological), get per-section and overall readiness percentages, and export a Statement-of-Applicability-style findings register. Word + CSV.

Organization & scope
Scoring guide

Score each item: Implemented = in place and effective (100%), Partial = started or informal (50%), Not implemented = absent (0%), N/A = excluded with justification (omitted from the score). Readiness % is the mean of scored items.

Part A — ISMS clauses 4–10
Part B — Annex A 2022 controls (93 across 4 themes)
Readiness summary

⚠️ This tool is a self-assessment aid based on ISO/IEC 27001:2022 (ISMS requirements) and ISO/IEC 27002:2022 (control guidance). The checklist items are representative summaries of the clauses and Annex A controls — not the full normative text, and not a certification audit. Implementing all 93 controls is not required: select controls by risk and justify exclusions in your Statement of Applicability. Buy the standards from ISO/your national body, and engage an accredited certification body for a formal audit.