Skip to main content

Free ISO 27001 Gap Analysis Template Download

ISO 27001 FOR STARTUPS AND SCALEUPS

Your next enterprise deal
needs ISO 27001.

Score your full gap assessment against all 93 controls before you pay anything. No card, no call. When you are ready for the documents and the audit package, the price is on the pricing page.

No card required. Your workspace is live in under a minute.
Free To Start All 93 Controls Covered EU Hosted Written Readiness Guarantee
Active Programme
Northwind Logistics Ltd
ISO 27001:2022 · Target: Sep 2026
On Track
Phase 1: Define and Establish5 / 8
1.1Understanding the organisation and its context
Complete
1.2Interested parties and requirements
In Progress
1.3ISMS scope definition
Not Started
Connects With The Systems You Already Run
AWS
GitHub
Microsoft Entra
Google Cloud
AWS
GitHub
Microsoft Entra
Google Cloud

Read only, always. Auditara reads configuration state, never your content, and never writes.

Two Paths To Certified. Pick Yours.

Run It Yourself

Readiness Workspace, Free To Start

The full workspace. Guided intake, every control assessed, remediation tracking, documents drafted from your answers, and the audit package at the end. Your pace, your team.

Start Free
Most Chosen

Run It With An Expert

Guided Implementation

Everything in the free workspace, plus a PECB certified ISO 27001 and ISO 42001 Lead Auditor and Lead Implementer working the programme with you, certification body coordination, and a written readiness guarantee.

Book A Call

Both paths use the same platform. Certification body fees are separate in either case.

Compliance Without The Chaos

Most of the pain is not the standard. It is not knowing what to do next.

You Always Know What Is Next

A guided programme with owners, dates and reminders, so nothing sits waiting for someone to remember it.

Plain English, Not Standard Speak

Every control explained in language a non specialist can act on, with guidance on exactly what evidence an auditor will expect.

Documents From Your Answers

Answer the intake once and your policies and Statement of Applicability are drafted from what you told us, then approved by you.

One Package For The Auditor

Gap report, remediation plan, Statement of Applicability and approved documents, exported as one branded package.

Everything The Programme Needs, In One Workspace

Track progress, hold the evidence, and stay ready for the audit without keeping it all in a spreadsheet and your head.

app.auditara.io/dashboard
3 activities are due this month. 1 document is waiting for approval.
ISO 27001:2022
Target certification date, September 2026
61 / 93
controls scored
Phase 2: Implement And Operate, 3 of 5 activities complete
14
Documents
32
Findings open
48
Evidence items
7
Due this month
Phase 2 activities
2.1Risk assessment and treatment
Complete
2.2Statement of Applicability
Complete
2.3Implement selected controls
In Progress
2.4Awareness and training
Not Started

Three Ways to Reach Audit Readiness. Two of Them Are Yours.

Scroll to compare

Traditional Consultancy
Readiness Workspace
Free To Start
Guided Implementation
Most Popular
CostBilled by the hourFree to start, £349 a month when you exportFixed scope agreed on the call
PaceTheir calendarYour paceCompressed, with delivery support
Your team's timeMeetings and email chainsGuided, a few hours a weekWe carry the load with you
DocumentsWritten for you, slowlyGenerated from your answersGenerated, then finished with you
Who is accountableDepends on the contractYou, with the methodology enforcing the routeUs, in writing: the guarantee
Expert accessBilled by the hourPlain English guidance throughout, and a call whenever you want oneA Lead Auditor and Lead Implementer through the whole programme

Certification body fees are separate in every route, including ours. We help you choose the body and coordinate the audit.

The Programme, Phase By Phase

Every programme runs the same four phases. A phase does not open until the one before it is complete, so the sequence does the remembering for you.

01
Define And Establish

Scope, context, interested parties and the risk approach. This is the phase that decides what actually gets certified, which is why the product will not let you skip past it.

8 activities in this phase
What You Produce
Scope statement agreed and recorded
Interested parties and requirements register
Risk assessment method defined
Information security policy drafted from your intake

Twenty one activities for ISO 27001. Other frameworks carry their own, seeded the same way.

Everything ISO 27001 Asks For, In One Place

The standard has 93 controls across four themes. Auditara covers every one, and tells you what evidence each needs.

93

Annex A controls assessed

21

Programme activities across four phases

14

Document templates drafted from your answers

1

Statement of Applicability, generated from your real gap data

Certifying against more than one standard? Run them side by side in the same workspace and reuse the evidence. See All Frameworks

Positioned Alongside Your Tools

Auditara does not replace your cloud stack or your AI assistant. It runs the certification programme across them.

Teams ask a chatbot questions about the standard. Monitoring platforms watch technical controls continuously, and suit companies maintaining a certificate they already hold.

Neither runs the programme that gets you certified: what happens next, who owns it, what evidence proves it, who signs it off.

Auditara is that layer, with the practitioner included.

AI assistants
Draft policies, answer questions about the standard
Auditara
Run the programme, track milestones
Monitoring platforms
Collect control evidence continuously

Link to evidence in any platform. Auditara tracks the milestone. The evidence stays where it lives.

The Three Ways We Work With You

Readiness Workspace

Run it yourself. Guided intake, one framework, every control assessed, and your remediation list. Free to start, no card. Paid plans begin at £349 a month when you want the documents and the audit package.

Start Free
Guided Implementation
Most Chosen

Run it with a practitioner. A PECB certified Lead Auditor and Lead Implementer works the programme with you, coordinates your certification body, and backs it with a written readiness guarantee. Capacity capped.

Book A Call

Certification body fees are charged separately by the accredited body, typically £3,500 to £4,500 for a company of ten to twenty five people. Auditara is not a certification body and issues no certificates.

Pricing

Readiness Workspace

Full workspace, one framework, every control assessed.

Free
Platform

Unlimited users.

Platform gives you the same programme to run yourself, at your own pace.

£349/month, or £3,490/year
Guided Implementation, ISO 27001

We run it with you, start to audit-ready.

Guided Implementation is audit-ready in 90 days, or we keep working at no charge until you are.

What The Guarantee Covers
£6,500 one-off
Guided Implementation, ISO 42001

AI management system, built on the ISMS you already have.

Scoped on a call.

Book A Scoping Call
From £11,000
Programme Assurance

Ongoing programme, after certification.

£249/month
Start Free

Certification body fees are separate. They are charged by the accredited body and passed through to you at cost, disclosed before you commit. Auditara is not a certification body and issues no certificates.

IN WRITING

The Guarantee

Guided Implementation carries a written readiness guarantee: complete the programme and if your certification body finds you are not ready for Stage 1, we keep working at no further cost or refund what you paid. The full terms are one page, in plain English, and you accept them before you start.

Read The Guarantee
Free Resource

Get The Free ISO 27001 Gap Analysis Template

All 93 Annex A controls in one spreadsheet: status dropdowns, owner and target date columns, and summary counts by theme. The same assessment Auditara runs in product, in a file you can open today.

  • Every control from the 2022 revision
  • Status, notes, owner and target date per control
  • Summary sheet calculated automatically
Or download it directly, no email needed
Email Me the Template

Optional. We will send the file plus one short follow up on running the assessment. No newsletter, no sharing your details.

Frequently Asked Questions

Find Out Where You Actually Stand

Score your first framework free. No card, no call, no queue. If you would rather talk it through first, the call is fifteen minutes and you leave with a route either way.