ISO 27001 Gap Analysis Tool

Fully compliant with ISO 27001: 2013

This ISO 27001 Gap Analysis Tool has been created to help organisations identify whether they are fully complying with the requirements of ISO 27001:2013 and where they are falling short.

This tool has been designed to help organisations prioritise their work areas in initial project planning of the ISMS. It gives those organisations direction, helping project managers to identify where to start.

What does the tool do?

• The tool contains a set of sample audit questions
• It lists all ISO 27001:2013 requirements, identifying where documentation is mandatory for compliance.
• It provides a clear, colour-coded, sub clause-by-sub clause report on the state of organisational compliance.
• The executive summary displays the results of your compliance in a clear table, so that you are able to report on your results and measure the closure of gaps. 

This tool is designed to work in any Microsoft environment; it does not need to be installed like software, and it does not depend on complex databases. It is reliant on human involvement.

For more information read our FAQ here