ISO 27001:2022 Compliance Checklist

An eight-page readiness checklist for ISO/IEC 27001:2022. Use it before a certification or surveillance audit to confirm that every required document, clause requirement and selected control is in place — and to see exactly where the gaps are.

What is inside

Part 1 — Mandatory documents and records: the documented information the standard explicitly requires, from the ISMS scope (4.3) to the nonconformity and corrective action log (10.2), each with its clause and purpose.

Part 2 — Recommended supporting documents: the policies and records auditors routinely ask for, mapped to the related Annex A controls.

Part 3 — Clause-by-clause compliance review: assessment questions for clauses 4 to 10.

Part 4 — Statement of Applicability review: a check that the Annex A controls you selected are implemented and working.

Who it is for

Information security managers, ISMS implementers, internal auditors and consultants preparing an organisation for ISO/IEC 27001:2022 certification or transition.

How to use it

Work through it alongside your risk assessment and your latest internal audit findings. Tick what exists, note what does not, and turn every gap into an action with an owner and a date. Print it, or complete it on screen and keep it as a record of your readiness review.