ISO 27001 2005 to 2013 Gap Analysis Tool

This ISO 27001: 2005 to 2013 Gap Analysis Tool has been created to help organisations who have implemented ISO 27001: 2005, to assess themselves and current status of compliance against ISO27001: 2013.

This tool will enable such organisations to identify where they need to make changes, implement new procedures, or phase-out previous controls.

What does the tool do?

This gap analysis has been designed to help organisations prioritise their work areas in initial project planning and for final, pre-certification audit review of the ISMS.

The tool helps organisations to tackle the upgrade of their ISMS to ISO 27001: 2013 with direction, identifying to project managers where to start first. The outcome of this tool and the analysis that it provides is the base for organisations to then conduct a detailed, granular approach to assessing their current information security control structure.

This tool is designed to work in any Microsoft environment; it does not need to be installed like software, and it does not depend on complex databases. It is reliant on human involvement.

For more information read our FAQ here