The ISO 27001 Readiness Checklist

20 checkpoints across the six areas an ISO/IEC 27001 certification audit will test — scored 0/1/2 out of 40, with verdict bands and a clear next move for each.

• Scope & context, leadership & policy, risk assessment & treatment — the clauses auditors check first
• The Annex A core controls that fail most often: access, MFA, backups (tested), patching, suppliers
• Incident response, continuity, internal audit — plus what your score band means for certification timing