Readiness Assessment
ISO 27001 Readiness Assessment
18 questions drawn directly from ISO/IEC 27001:2022's own management-system requirements and Annex A controls — with a domain-by-domain ISMS readiness score.
Free18 questions~6 min8 domainsNo credit card
Results are personalized to your answers — nothing is pre-written.
WHAT YOU RECEIVE
- An indicative readiness scoreWeighted against ISO 27001's own published requirements.
- A score for each of your domainsAll 8 domains, scored separately — not one blended number.
- Your specific gaps, explainedWhy each one matters and the action that closes it.
- A Now / Next / Later roadmapPrioritized by severity, so you know what to do first.
- A downloadable PDF reportSomething you can circulate internally.
The assessment and your score are free. The full report is unlocked with a business email.
What this assessment covers
18 questions across 8 domains, every one tied to a specific published ISO 27001 requirement.
01ISMS Governance & LeadershipTop-management commitment and the information security policy (Clause 5.1-5.3).
02Risk Assessment & TreatmentThe risk assessment methodology, treatment plan, and Statement of Applicability (Clause 6.1).
03Organizational ControlsPolicies, roles, asset management, and supplier relationships (Annex A.5).
04People ControlsScreening, training, and security-event reporting by personnel (Annex A.6).
05Physical ControlsPhysical security perimeters, entry controls, and media handling (Annex A.7).
06Technological ControlsAccess control, cryptography, monitoring, backup, and secure development (Annex A.8).
07Performance EvaluationInternal audit and management review that keep the ISMS operating, not just documented (Clause 9).
08Nonconformity & ImprovementCorrective action and continual improvement of the ISMS (Clause 10).
How it works
1Answer 18 questionsAbout 6 minutes. Each question states the requirement it maps to, so you always know what's being asked and why.
2See your score immediatelyYour overall readiness, maturity level, and where your strongest and weakest areas sit — free, on screen, no email required.
3Unlock the full reportAdd a business email to get every domain scored, all findings explained, a prioritized roadmap, and a PDF you can circulate.
This is a self-assessment tool, not a certification audit or a determination of certification readiness. It produces an indicative ISMS maturity score based on your own answers, not an independent verification by an accredited certification body. Only an accredited certification body's audit can determine actual certification readiness.
WANT THE FULL PICTURE FIRST?
Read Executive GuideISO 27001: The Complete Executive Guide
A practitioner's guide to the ISMS, the 2022 Annex A restructure, the certification process, and what actually changed from the 2013 version.
Explore ISO 27001
Hub overview →
INTERACTIVE TOOLS