Information Security

An ISO 27001 readiness assessment is the honest audit you run on yourself before a certification body runs one on you. This checklist walks through the mandatory requirements of Clauses 4 to 10, scores the 93 Annex A controls across the four 2022 themes, sets out the documented information an auditor asks for by name, and names the seven gaps that turn up in almost every first assessment. It covers a maturity scoring method that produces a remediation plan rather than a dashboard, realistic remediation timescales per gap type, the difference between doing the assessment in-house, consultant-led or platform-led, and the single biggest predictor of failing Stage 2.