Professional Documents
Culture Documents
ISO27001 2022 Self-Assessment Checklist - (9p)
ISO27001 2022 Self-Assessment Checklist - (9p)
ISO27001:2022 Self-Assessment
Checklist
ISO27001:2022 Self-Assessment Checklist
This ISO27001:2022 Self-Assessment Checklist is intended as a starting point for those considering implementing and/or certifying to ISO27001:2022 to gain
a better understanding of what requirements are met and need to be met to assess budget and resource. It can also be used as a tool for improvement for
those already aligned to ISO27001 who are wanting to see their general level of compliance.
It’s important to note that this checklist does not include all the requirements of the ISO27001:2022 standard and should be used as a general guide when
aligning to some of the main requirements that are common within many industries and organizations. We would advise always having a copy of the
standard you’re deciding to implement or certify to, this can either be purchased via the ISO website, or as an alternative, the exact text of the
ISO27001:2022 standard is included in our ISO27001 Enhanced Gap Assessment.
Going through each section of the standard: 4-10, using the requirements within the table you can decide whether this has been fully, partially, or not met
and create a plan using the columns in the table to achieve these requirements. At the end of the assessment, you will have a list of requirements met and
actions required to gain a better understanding of the work required to prepare for certification to the standard.
Note that this checklist does not cover the 93 Annex A controls at the back of the standard. As part of your implementation, you will decide which of these
are applicable to your organization.
ISO27001:2022 Self-Assessment Checklist
5. Leadership
6. Planning
7. Support
8. Operation
Ref ISO27001 Requirement Req. Met? Action Action needed to meet requirement Date Date
Yes/Partially/No Owner Planned Achieved
1 Are all of the processes needed to meet
requirements planned, implemented and
controlled?
2 Are planned changes to the ISMS controlled
effectively?
3 Do all externally provided resources meet the
defined information security requirements?
4 Are information security risk assessments
carried out when planned?
5 Is the risk treatment plan being implemented?
ISO27001:2022 Self-Assessment Checklist
9. Performance Evaluation
10. Improvements