FortressSphere

ISO/IEC 27001:2022 Self-Assessment (Information Security Management)

A comprehensive self-assessment against ISO/IEC 27001:2022, the current international standard for Information Security Management Systems (ISMS). The 2013 version's transition deadline passed 31 October 2025, so 2022 is now the sole valid edition, referenced throughout including its 2024 environmental amendment. Unlike the other frameworks on this platform, ISO 27001 is a VOLUNTARY standard, not a law. However, it is important for organizations that takes security seriously and is serious about proving this to clients, investors and other stakeholders as well as win their trust and confidence. This assessment measures alignment and certification readiness, not legal compliance. Covers all 7 management system clauses and all 4 Annex A control themes. Takes about 35-40 minutes given the breadth of this standard.

Sections

Questions

Some appear only when an earlier answer makes them relevant

Not included in your plan

Starting this audit requires the ISO 27001 Framework Access add-on. Sign in and subscribe to continue.

View pricing

What it covers (13)

1. ISMS Scope, Context & Interested Parties (Clause 4)3 questions
2. Leadership, Policy & Roles (Clause 5)3 questions
3. Risk Assessment, Treatment & Statement of Applicability (Clause 6)4 questions
4. Resources, Competence, Awareness & Documentation (Clause 7)4 questions
5. Operational Planning, Control & Supplier Management (Clause 8)3 questions
6. Performance Evaluation: Monitoring, Internal Audit & Management Review (Clause 9)4 questions
7. Improvement: Nonconformity & Corrective Action (Clause 10)2 questions
8. Annex A.5 — Organisational Controls9 questions
9. Annex A.6 — People Controls6 questions
10. Annex A.7 — Physical Controls6 questions
11. Annex A.8 — Technological Controls12 questions
12. New 2022 Controls & the 2024 Environmental Amendment7 questions
13. Certification Pathway & Ongoing Maintenance3 questions