ISO Gap Analysis Checklist
Find out exactly where your management system stands. Our gap analysis checklists compare your current practices against ISO requirements so you can plan a clear route to certification.
What is a Gap Analysis?
A gap analysis is a systematic assessment that compares your organisation's current practices against the requirements of an ISO standard. It identifies where you already comply, where gaps exist, and what actions are needed to achieve full conformity. Think of it as a diagnostic tool — it gives you an honest picture of your starting point before you invest time and resources into implementation.
Unlike a formal audit, a gap analysis is not about pass or fail. Its purpose is to highlight strengths, pinpoint weaknesses, and produce a prioritised action plan that guides your organisation from its current state to full compliance.
When to Conduct a Gap Analysis
A gap analysis delivers the most value at key decision points in your management system journey:
- Before starting ISO implementation (baseline assessment)
- When transitioning between standard versions
- Before a certification or surveillance audit
- When expanding scope to include new processes or sites
- After significant organisational changes such as restructuring or acquisitions
How Our Gap Analysis Works
The checklist follows a structured, clause-by-clause approach. For every requirement in the standard, you record the following information:
| Field | Purpose |
|---|---|
| Requirement Description | Plain-language summary of what the standard requires |
| Current Status | Compliant / Partially Compliant / Non-Compliant / Not Applicable |
| Evidence of Compliance | Documents, records, or observations that demonstrate conformity |
| Gap Description | What is missing or insufficient compared to the requirement |
| Recommended Actions | Specific steps needed to close the gap |
| Priority Rating | High / Medium / Low based on risk and certification impact |
| Responsible Person & Target Date | Who owns the action and when it should be completed |
Benefits of Gap Analysis
Organisations that conduct a thorough gap analysis before pursuing certification consistently report smoother implementation projects and fewer surprises at the certification stage. Key benefits include:
Know Where You Stand
Get a clear, objective picture of your current compliance level across every clause of the standard.
Prioritise Resources
Focus your time and budget on the areas that matter most, rather than spreading effort thinly across the entire standard.
Realistic Timeline
Build an implementation plan based on actual gaps rather than guesswork, giving management confidence in your schedule.
No Surprises at Certification
Address weaknesses before the external auditor arrives, reducing the risk of major nonconformities during the certification audit.
A completed gap analysis also demonstrates due diligence to senior management, providing the evidence they need to approve budgets and allocate resources for the implementation project.
Standards Covered
Our gap analysis checklists are available for the four most widely implemented ISO management system standards:
ISO 9001 — Quality Management
Clause-by-clause gap assessment against all requirements of ISO 9001:2015, covering quality policy, risk-based thinking, and process performance.
ISO 14001 — Environmental Management
Evaluate your environmental management practices against ISO 14001:2015 including environmental aspects, legal compliance, and operational controls.
ISO 45001 — Health & Safety
Assess your occupational health and safety system against ISO 45001:2018 covering hazard identification, worker consultation, and emergency preparedness.
ISO 27001 — Information Security
Review your information security controls against ISO 27001:2022 including risk assessment, access control, and incident management.
How to Use the Gap Analysis Checklist
- Download the checklist for your chosen standard
- Assemble a small team with knowledge of your current processes
- Work through each clause, recording your current status and evidence
- Identify gaps and describe what is missing or incomplete
- Assign actions with owners, priorities, and target dates
- Present the results to management for approval and resource allocation
- Track progress against the action plan until all gaps are closed