ISO 27001 Gap Assessment

In plain terms

ISO 27001 is the international standard for running a real information security programme. Certification works like a credit score for security — something you can show a customer instead of asking them to take your word for it. A gap assessment tests you against all 93 Annex A controls plus the management-system clauses, and tells you precisely what stands between you and a certificate.

What you get

• Assessment against all 93 Annex A controls and clauses 4–10
• Findings rated by severity, with the evidence we could and could not see
• A gap closure plan sequenced by effort and dependency, not alphabetically
• Statement of Applicability draft you can carry into certification

Who it is for

Companies being asked for ISO 27001 by a customer, an investor, or a tender — and companies who want to know the real cost before committing.