Know exactly where you stand against ISO 27001:2022.Before you commit to the build.
A focused gap and readiness assessment: we measure your current posture against all 93 Annex A controls, score your readiness, map the gaps, and hand you a prioritised roadmap with a realistic timeline and effort estimate. The clearest, lowest-risk first step toward certification.
Sample readiness scorecard
What your assessment output looks like — domain-by-domain, against the 2022 standard.
- Partial23 of 37 Annex A controls in place · 14 to close
- Gap3 of 8 Annex A controls in place · 5 to close
- Strong11 of 14 Annex A controls in place · 3 to close
- Gap15 of 34 Annex A controls in place · 19 to close
- Partial11 of 20 treatment items in place · 9 to close
Every domain scored against the actual Annex A controls. Not a questionnaire. Not a maturity model. The evidence-based picture an auditor would see.
Teams that jump straight to the build pay for it later.
Scoping Blind
Committing to an implementation without a defined scope is how projects overrun on time and budget — often by more than the assessment would have cost.
Hidden Gaps
The controls you assume are covered often aren't audit-ready. You don't find that out until it's expensive and time-pressured to fix.
No Baseline
Without a starting score, you can't measure progress, forecast effort, or budget the work with any confidence. Every decision becomes a guess.
Surprise at Stage 1
First-time certifiers often discover significant gaps during the external audit — the worst possible place, and the most expensive time, to find them.