Readiness screening · about 4 to 6 minutes

ISO 27001 readiness

Start with the management system, not a badge. Rate 12 original prompts as Operating, Partial, Planned, Not in place or Not sure, see your readiness by area, and get a remediation template for every gap. Everything stays in your browser.

12 prompts4 areas100% privateFree

Start this assessment See all 15

Scope. 12 original preparation questions. Does not reproduce ISO clauses or Annex A, determine conformity, or replace a licensed standard and qualified assessment. Reference: ISO/IEC 27001 overview (context only, not an endorsement).

What this assessment covers

The 12 prompts, grouped by area. Each one has a "what to look for" note and a concrete action inside the assessment.

Scope

Is the information-security programme boundary documented?
Are stakeholder and contractual expectations understood?
Has management assigned resources and responsibilities?

Risk

Is the risk-assessment method consistent and documented?
Do risk treatments have accountable owners?
Are control applicability decisions explained?

Controls

Are key policies approved and maintained?
Can operating records support your control descriptions?
Do people understand their security responsibilities?

Improvement

Has the programme been independently challenged internally?
Does management review performance and unresolved risks?
Are corrective actions checked for effectiveness?

How scoring works. Only rated prompts count toward the index. Not sure and unanswered prompts are reported separately and never scored as a pass or a gap. Gaps are listed highest priority first, each with a link to a matching template in the open GRC Documentation Kit. This is a conversation starter, not an audit or a certification.

Start the ISO 27001 readiness assessment

Other assessments: NIST CSF 2.0 · SOC 2 preparation · Cloud & identity · AI & agent security · SOC & incident readiness · Small business security · Web & API release readiness · Supplier security review · Backup & recovery readiness · Secure software delivery · Identity & privileged access · Mobile release readiness · Data protection operations · Security culture & role readiness