Free Checklist

The ISO 27001 Audit Preparation Checklist

Most Stage 1 delays come from the same handful of gaps: an incomplete Statement of Applicability, missing evidence for a control someone assumed was covered, or scope that was never written down. This checklist walks through the gap assessment, scope documentation, and evidence checks we run before every Stage 1 audit, so you find the gaps before your auditor does.

• The gap-assessment steps to run against ISO 27001 controls and Annex A before Stage 1
• How to document ISMS scope so it holds up under auditor questioning
• The evidence checks that catch missing artifacts before they become findings
• A Statement of Applicability review pass most teams skip