Skip to main content

    Free framework self-check

    ISO/IEC 27001:2022 Self-Check

    Ten self-reported questions on how your organization governs information security, mapped to the themes of ISO/IEC 27001:2022.

    The risk
    The tool suggests possible gaps from your answers. It does not verify controls or provide an audit, certification or legal advice.
    Start the ISO 27001 self-checkTalk to us
    a readiness gap register beside a bundle of sampled control-testing evidence.

    How the self-check works

    1. You give a first name, company and work email. Your session is stored and a resume link is sent by email.
    2. An external AI service uses your intake details to draft ten questions about the framework. You answer in your own words; no documents are uploaded.
    3. You receive a short summary of potential gaps and a suggested order of work, based only on your answers.
    4. Use the summary to discuss open questions with your team. If you need a professional review, contact us before sharing records or confidential information.

    The summary comes from your answers, not a review of your systems. It cannot be used as an audit or certification result.

    Who it is for

    Organizations preparing for a first certification audit, a customer security review or an internal audit that need a quick view of the obvious gaps before deciding on a professional assessment.

    Information security management system

    The five themes covered

    Governance and policy
    Whether a documented information security policy exists and whether a named person or team is accountable for the information security management system (ISMS).
    Risk management
    Whether a formal risk assessment has been performed and whether a risk treatment plan records how each risk is handled.
    Access control and identity
    How access is granted, reviewed and removed, and whether privileged access is controlled.
    Operations and incident management
    Whether changes, logging, monitoring and incident response follow documented procedures.
    Supplier and business continuity
    How supplier security is assessed and whether continuity and recovery arrangements are tested.

    From self-check to assessment

    An ISO/IEC 27001 gap assessment reviews your security program, risk assessment, policies and control records. An internal audit checks whether the management system meets its requirements and reports the findings.

    AuditPartners helps you prepare. An external certification body conducts its own audit and decides certification.

    Guides and assessment services

    The next step

    Start the ISO 27001 self-check

    Ten questions, answered in your own words. Sessions are stored so you can resume; session pages are not indexed.

    Start the self-checkTalk to us