ISO 19011

Gap analysis and internal audit

An independent view of your system — where you stand against the standard, what is missing and what to do first. Before certification, before a surveillance audit, or for an inherited system.

1–2 weekstypical duration incl. report
ISO 19011audit methodology
1 reportwith clear priorities
Why it matters

Gap analysis and internal audit

A gap analysis compares your current state with the requirements of the standard and answers the question “how far are we from certification”. An internal audit is a mandatory part of every ISO system and checks whether it works the way it is described.

We audit following ISO 19011 guidance — with a plan, sampling, evidence and objective findings. You get a report that management understands and the team can use.

ISO 19011

What the service includes

01

Gap analysis

Against ISO 27001, ISO 9001 or NIS2 — with a readiness score.

02

Internal audit

On an annual programme or before certification and surveillance audits.

03

Supplier audits

Second-party audits of key suppliers.

04

Findings report

Nonconformities, observations and opportunities for improvement.

05

Corrective actions

A plan with owners and deadlines for each nonconformity.

06

Management review

Preparing the inputs and the minutes.

Who

Who it is for

  • Companies before their first certification
  • Certified companies before a surveillance audit
  • Companies with an inherited system nobody maintains
  • Organisations that want an independent IT security check
Steps

How the audit runs

  1. Planning Scope, criteria and schedule.
  2. Document review Policies, procedures, records.
  3. Interviews and checks On site or online, with evidence.
  4. Report Findings, rating, priorities.
  5. Corrective actions Plan and follow-up.
01 Can an external consultant perform the internal audit?

Yes. The standards require the auditor to be objective and impartial — an external auditor is the usual choice for small companies.

02 How is a gap analysis different from an internal audit?

A gap analysis assesses readiness before implementation; an internal audit checks a system that is already running.

03 How long does it take?

Usually 1 to 3 days on site or online, plus a report within a week.

Your first consultation is free

Tell us about your company and your goal. You will get a clear plan and a quote within one business day.

Book a consultation