ISO 27001 Gap Analysis
Know Exactly Where You Stand Against ISO 27001
A specialist, in-person review of your current information security posture against the requirements of ISO 27001:2022. Get the true picture of your compliance gaps, plus expert advice on how to scope your project and plan your resources.
- World’s first organisation to implement an ISMS aligned with ISO 27001
- 24+ years of hands-on ISO 27001 implementation experience
- 20,000+ ISO 27001 projects supported worldwide
- 4.4 rated excellent by 287 reviewers on Trustpilot
What you’ll get
A clear, expert assessment you can build your business case on.
Your compliance gaps
Where your current arrangements meet ISO 27001 and where they fall short.
The scope of your ISMS
Options for the scope of your ISMS (information security management system) and how each supports your objectives.
Your resource requirements
The internal management effort needed to implement an ISO 27001-compliant ISMS.
A realistic timeline
The potential timeline to reach certification readiness, so you can set realistic expectations.
The ISO 27001 specialists
Why choose GRC Solutions?
We led the world’s first ISO 27001 certification project, when the Standard was known as BS 7799, and we’ve been refining our approach ever since.
ISO 27001 projects supported
professionals trained in ISO 27001 implementation and audit
implementations behind our methodology
years of hands-on ISO 27001 implementation experience
How it works
Interviews with key managers
An ISO 27001 specialist speaks with the people who run your information security today, on-site or online.
Analysis of your arrangements
Our specialist reviews your existing security arrangements and documentation against the Standard.
Your gap analysis report
You receive a report of the findings, with areas of compliance, areas for improvement and recommendations for your project.
What your report includes
- An overview of the state and maturity of your information security arrangements.
- A summary of the specific gaps between those arrangements and the requirements of ISO 27001.
- Options for the scope of an ISMS, and how they help meet your business and strategic objectives.
- An outline action plan, with the level of internal management effort required.
- A red/amber/green compliance status report against every management system clause and every information security control.
See exactly what you’ll receive before you commit, and share it with the people who’ll sign off your project.
A questionnaire can’t give you a specialist’s judgement
Questionnaire-based gap analyses don’t offer the level of analysis and insight you get from talking to an expert. An in-person review gives you the detail you need to make the case for an ISMS.
Questionnaire-based review
Relies on self-assessment answers
Generic findings that may not reflect how you really work
Little guidance on scope, resources or timelines
GRC Solutions in-person gap analysis
A clear, proposed scope for your ISMS
Realistic project expectations, based on your organisation
Customised, detailed information for a strong business case
What our customers say
We brought [GRC Solutions] in to get Avayler through ISO 27001 certification, and they delivered a first-time pass with zero non-conformities: no small thing on a first attempt. What’s kept us working with them for two years since is the consistency: their internal audits are thorough and genuinely challenging, which is exactly what you want from an auditor.
Having [GRC Solutions] on hand to guide our swift adoption of the ISO 27001 standard and provide ongoing expert support has been invaluable. They really understood the needs of a technology enterprise like ours.
I would have no hesitation in recommending [GRC Solutions] to others. The main advantage was their flexibility. [GRC Solutions] tailored their services, (whether it be training or consultancy) to our specific needs.
One fixed price, no surprises
You’ll know the cost before we start. Prefer to pay by purchase order? You can apply for a corporate account or call our service centre team on +44 (0)333 800 7000.
Good to know
- If your business is outside mainland UK (England, Scotland and Wales), additional expenses will be charged to cover our consultant’s travel for the on-site assessment.
- Timing depends on the size and complexity of your organisation. The final report is normally delivered within ten working days of the initial site visit or online assessment. If it’s likely to take longer, we’ll tell you at the outset.
ISO 27001 Gap Analysis
Fixed price, agreed with you up front. Ask us for a quote for your organisation.
- Specialist interviews and documentation review
- Full gap analysis report with recommendations
- Red/amber/green status for every clause and control
- Outline action plan and ISMS scope options
ISO 27001 gap analysis FAQs
How long does the gap analysis take?
It depends on the size and complexity of your organisation. The final report is normally delivered within ten working days of the initial site visit or online assessment. If it’s likely to take longer, we’ll tell you at the outset.
Is the assessment on-site or online?
Either. Our specialist interviews your key managers and reviews your existing security arrangements and documentation in person or online. If your business is outside mainland UK (England, Scotland and Wales), additional expenses will be charged to cover travel for an on-site assessment.
Which version of ISO 27001 do you assess against?
We assess your arrangements against ISO 27001:2022, covering both the management system clauses and the information security controls.
How is this different from a questionnaire-based gap analysis?
A questionnaire relies on your own answers. With an in-person review, a specialist gives you a clear proposed scope for your ISMS, realistic project expectations and the detailed information you need to build a strong business case.
What happens after the gap analysis?
Your report includes an outline action plan and the level of internal effort needed. If you’d like support with the next steps, our ISO 27001 consultancy services range from fixed-price FastTrack™ consultancy to services designed around your needs.
Speak to an ISO 27001 expert
Get free, practical advice on the gap analysis process from one of our qualified ISO 27001 specialists. Tell us a little about your organisation and we’ll be in touch shortly.
- Free, practical advice on the gap analysis process
- A fixed-price quote for your organisation
- Answers on scope, timings and next steps
Prefer to talk now? Call us on +44 (0)333 800 7000.