ISO 27001 · Free readiness checklist
ISO 27001 Readiness Checklist
A practical readiness aid for organizations preparing an ISO/IEC 27001 information security management system (ISMS). ISO/IEC stands for the International Organization for Standardization and the International Electrotechnical Commission.
41 checks in 7 sections. About 15 min. It opens on this page as soon as you send the form. Last reviewed October 26, 2026.
What this checklist covers
- Context and scope of the ISMS 5 checks
- Leadership and information security policy 4 checks
- Risk assessment and treatment 5 checks
- Statement of Applicability (SoA) awareness 4 checks
- Annex A controls (practical grouping) 16 checks
- Documentation and evidence 3 checks
- Internal audit and management review readiness 4 checks
Questions
Who is this checklist for?
Information security, information technology (IT), risk and business owners who want to brief leadership and plan a formal pre-assessment or Stage 1 readiness review.
Will this checklist make us compliant or certified?
No. It is a readiness aid that helps you find gaps before you start work with an auditor or assessor. It is general guidance, not legal advice, and it does not know your specific systems.
What happens after I send the form?
The full checklist opens on this page straight away. Your ticks are saved in this browser only, and you can print the checklist or save it as a PDF.
Will you email me?
Only if you tick one of the boxes. We then send one email asking you to confirm your address, and the updates start only after you confirm. You can unsubscribe at any time. Our Privacy Policy explains how we use your details.
This checklist is a general readiness aid, not legal advice. It does not know your specific systems or environment, and completing it does not make an organization compliant or certified. Check obligations that apply to you with qualified counsel.
