Skip to content
Quality Organization Management
العربية

Readiness Assessment

ISO 27001:2022 readiness assessment

Answer the following questions based on your organization’s current situation.

Question 1 of 8: Have you defined the scope of your information security management system and the assets it covers?
Question 2 of 8: Do you have an up-to-date inventory of information assets and their owners?
Question 3 of 8: Have you carried out an information security risk assessment with a treatment plan?
Question 4 of 8: Do you have approved security policies (passwords, acceptable use, backups)?
Question 5 of 8: Is access to systems managed and reviewed periodically?
Question 6 of 8: Do you have a procedure for reporting and responding to security incidents?
Question 7 of 8: Have staff received information security awareness training?
Question 8 of 8: Do you carry out internal audits and management reviews of the system?

This is a preliminary self-assessment and does not replace a detailed professional assessment by a QOM consultant.