Free checklist · Ireland and South Africa
Know what an auditor will ask before your ISO 27001 audit.
This checklist follows ISO/IEC 27001:2022 clause by clause, with the key Annex A areas, so you can see what is in place and what still needs evidence.
What's inside
25 checks across 5 areas.
Covers Clauses 4 to 10 and the Annex A areas certification bodies focus on, from scope and risk assessment to internal audit and management review.
- Context and scope (Clauses 4 to 5) (4 checks)
- Planning and risk (Clause 6) (5 checks)
- Support and operation (Clauses 7 to 8) (4 checks)
- Key Annex A areas (7 checks)
- Performance and improvement (Clauses 9 to 10) (5 checks)
Who it's for
- Organisations preparing for first certification
- Technology and SaaS companies asked for ISO 27001 by customers
- Organisations moving to the 2022 version
- Teams preparing for Stage 1 and Stage 2 audits
Get the free checklist
Tell us where to send it. The PDF opens as soon as you submit.
You don't need to tick the box to get the checklist. SecuriCentrix Ltd uses your details to send you this checklist and, only if you tick the box, occasional marketing emails. You can object to marketing at any time. See our Privacy Policy.
How it works
Built for the conversation with your board and auditors.
Plain-English checks
Each requirement is written as something you can tick off, grouped the way the framework is structured.
Sourced to the rules
Numbered notes link to the regulation, standard or regulator guidance behind each point.
Clear next steps
Use the gaps you find to agree owners and dates, or bring them to a readiness review with us.
Want a second pair of eyes?
Book a 30-minute review to go through your gaps and a practical plan to close them.