{"id":13684,"date":"2022-04-25T10:17:42","date_gmt":"2022-04-25T08:17:42","guid":{"rendered":"https:\/\/brandcompliance.com\/services\/pre-audit\/"},"modified":"2026-07-22T10:30:43","modified_gmt":"2026-07-22T08:30:43","slug":"gap-analysis","status":"publish","type":"page","link":"https:\/\/brandcompliance.com\/en\/services\/gap-analysis\/","title":{"rendered":"ISO gap analysis before certification"},"content":{"rendered":"<p>Are you considering certification against an ISO standard or another standard, but are you unsure whether your management system has been sufficiently established and implemented? An ISO gap analysis provides insight into the extent to which your current management system meets the agreed requirements of the relevant standard.<\/p>\n<p><img decoding=\"async\" class=\"alignright\" src=\"http:\/\/brandcompliance.com\/wp-content\/uploads\/2023\/06\/20230413-Brandcompliance-250-web.jpg\" alt=\"ISO gap analysis before certification\" width=\"300\" height=\"198\" \/><\/p>\n<p>The gap analysis takes place before the formal certification process. During the assessment, the auditor determines which standard requirements are supported by relevant evidence and which aspects may require further establishment or implementation. This gives your organization a clearer understanding of its current position before applying for certification.<\/p>\n<p>A gap analysis can be performed against various ISO standards and other management system standards. The applicable standard, the proposed scope and the depth of the assessment are agreed with your organization in advance. <a href=\"#standards-gap-analysis\">See below which standards can be included in a gap analysis<\/a>.<\/p>\n<p>A gap analysis is a voluntary assessment. It does not replace the formal certification audit and does not guarantee that your organization will subsequently obtain certification.<\/p>\n<p><a href=\"https:\/\/brandcompliance.com\/en\/contact\/meet-brand-compliance\/\"><br \/>\n<strong>Discuss your gap analysis with Brand Compliance<\/strong><br \/>\n<\/a><\/p>\n<nav style=\"margin: 28px 0 36px; padding: 22px; background-color: #eef5f6; border-left: 5px solid #5e9cae; border-radius: 6px;\" aria-label=\"Contents of this page\">\n<p style=\"margin: 0 0 14px; color: #004250; font-size: 18px; font-weight: bold;\">Go directly to:<\/p>\n<div style=\"display: flex; flex-wrap: wrap; gap: 10px;\"><a style=\"box-sizing: border-box; flex: 1 1 280px; display: flex; align-items: center; min-height: 58px; padding: 12px 14px; color: #004250; font-weight: bold; line-height: 1.35; text-decoration: none; background-color: #ffffff; border: 1px solid #5e9cae; border-radius: 4px;\" href=\"#when-gap-analysis\">When is a gap analysis useful?<\/a><a style=\"box-sizing: border-box; flex: 1 1 280px; display: flex; align-items: center; min-height: 58px; padding: 12px 14px; color: #004250; font-weight: bold; line-height: 1.35; text-decoration: none; background-color: #ffffff; border: 1px solid #5e9cae; border-radius: 4px;\" href=\"#assessment-gap-analysis\">What can be assessed?<\/a><a style=\"box-sizing: border-box; flex: 1 1 280px; display: flex; align-items: center; min-height: 58px; padding: 12px 14px; color: #004250; font-weight: bold; line-height: 1.35; text-decoration: none; background-color: #ffffff; border: 1px solid #5e9cae; border-radius: 4px;\" href=\"#process-gap-analysis\">How is a gap analysis performed?<\/a><a style=\"box-sizing: border-box; flex: 1 1 280px; display: flex; align-items: center; min-height: 58px; padding: 12px 14px; color: #004250; font-weight: bold; line-height: 1.35; text-decoration: none; background-color: #ffffff; border: 1px solid #5e9cae; border-radius: 4px;\" href=\"#cost-gap-analysis\">How much does a gap analysis cost?<\/a><\/div>\n<\/nav>\n<h2>What is an ISO gap analysis?<\/h2>\n<p>An ISO gap analysis is an assessment that compares the current establishment and implementation of a <a href=\"https:\/\/brandcompliance.com\/en\/docs\/what-is-a-management-system\/\">management system<\/a> with the agreed requirements of an ISO standard or another standard. This assessment is also referred to as an ISO baseline assessment. Its purpose is to identify the differences between the current situation within your organization and the requirements you intend to meet. Depending on the agreed scope and depth, the assessment may cover documented information, processes, responsibilities, management system activities and available evidence. The outcome provides a snapshot of the management system at the time of the assessment. Your organization can use the findings to determine which actions may be required before starting the formal certification process.<\/p>\n<h2 id=\"when-gap-analysis\" style=\"scroll-margin-top: 120px;\">When is a gap analysis useful?<\/h2>\n<p>A gap analysis may be relevant when:<\/p>\n<ul>\n<li>your organization is considering certification but has not yet submitted a formal certification application;<\/li>\n<li>a management system has been established, but it is unclear to what extent it meets the applicable standard requirements;<\/li>\n<li>policies, processes and controls are in place, but documented information or evidence of implementation may not yet be complete;<\/li>\n<li>your organization wants an independent assessment before starting the certification process;<\/li>\n<li>your organization is implementing a management system standard for the first time;<\/li>\n<li>an existing management system is being extended to include an additional standard;<\/li>\n<li>multiple management systems are being integrated;<\/li>\n<li>your organization wants to identify areas requiring attention before applying for certification.<\/li>\n<\/ul>\n<p>An ISO baseline assessment or gap analysis is not mandatory for certification. Organizations that consider their management system to be sufficiently established and implemented can apply directly for certification. Read more about the different stages in our <a href=\"https:\/\/brandcompliance.com\/en\/docs\/certification-process-step-by-step\/\">step-by-step overview of the certification process<\/a>.<\/p>\n<h2 id=\"standards-gap-analysis\" class=\"bc-anchor\">For which standards can a gap analysis be performed?<\/h2>\n<p>A gap analysis can be performed against various ISO standards and other standards or certification requirements. Depending on the proposed scope, the assessment may cover:<\/p>\n<ul>\n<li><a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-27001-certification\/\"><strong>ISO\/IEC 27001<\/strong><\/a> for information security management systems;<\/li>\n<li><a href=\"https:\/\/brandcompliance.com\/en\/services\/nen-7510-certification\/\"><strong>NEN 7510<\/strong><\/a> for information security in healthcare;<\/li>\n<li><a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-9001-certification\/\"><strong>ISO 9001<\/strong><\/a> for quality management systems;<\/li>\n<li><a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-14001-certification\/\"><strong>ISO 14001<\/strong><\/a> for environmental management systems;<\/li>\n<li><a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-19770-1\/\"><strong>ISO\/IEC 19770-1<\/strong><\/a> for IT asset management systems;<\/li>\n<li><a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-22301\/\"><strong>ISO 22301<\/strong><\/a> for business continuity management systems;<\/li>\n<li><a href=\"https:\/\/brandcompliance.com\/en\/services\/gdpr\/iso-27701-certification\/\"><strong>ISO\/IEC 27701<\/strong><\/a> for privacy information management systems.<\/li>\n<\/ul>\n<p>Additional standards, controls or scheme requirements may be included in the assessment when they fall within the services provided by Brand Compliance.<\/p>\n<p>Does your organization have an integrated management system? Multiple standards can be assessed within a single gap analysis, provided that a combined assessment is practicable and the arrangements have been agreed in advance.<\/p>\n<h2 id=\"assessment-gap-analysis\" style=\"scroll-margin-top: 120px;\">What can be assessed during a gap analysis?<\/h2>\n<p>The content of the gap analysis depends on the selected standard, the proposed scope and the agreed depth. The assessment may cover:<\/p>\n<ul style=\"box-sizing: border-box; margin: 20px 0 24px; padding-left: 22px; column-count: 2; column-width: 290px; column-gap: 28px; list-style-type: disc; list-style-position: outside;\">\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">the context of the organization and relevant interested parties;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">the proposed scope and boundaries of the management system;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">leadership, policies, roles and responsibilities;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">risks, opportunities and applicable requirements;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">objectives and the plans for achieving them;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">available resources, competence and awareness;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">internal and external communication;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">the control of documented information;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">the establishment and implementation of relevant processes and controls;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">monitoring, measurement and performance evaluation;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">completed internal audits;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">the management review;<\/span><\/li>\n<li style=\"break-inside: avoid; margin: 0; padding: 10px 0 10px 2px; color: #5e9cae; border-bottom: 1px solid #dbe8ea;\"><span style=\"color: #666666;\">the treatment of nonconformities and continual improvement.<\/span><\/li>\n<\/ul>\n<p>Not every aspect applies to every standard in the same way. The assessment criteria are therefore determined based on the requirements of the selected standard and the agreed scope.<\/p>\n<h2 id=\"process-gap-analysis\" style=\"scroll-margin-top: 120px;\">How is a gap analysis performed?<\/h2>\n<p>A gap analysis consists of three main stages. The precise approach depends on the selected standard, the scope and the agreed depth.<\/p>\n<div style=\"display: flex; flex-wrap: wrap; gap: 18px; margin: 24px 0 30px;\">\n<div style=\"box-sizing: border-box; flex: 1 1 260px; padding: 28px 22px 22px; background-color: #ffffff; border: 1px solid #bdd3d7; border-top: 5px solid #004250; border-radius: 6px;\">\n<div style=\"display: flex; align-items: center; justify-content: center; width: 38px; height: 38px; margin: 0 0 16px; color: #ffffff; font-weight: bold; background-color: #5e9cae; border-radius: 50%;\" aria-hidden=\"true\">1<\/div>\n<h3 style=\"margin: 0 0 10px; color: #004250; font-size: 19px;\">Define<\/h3>\n<p style=\"margin: 0;\">Brand Compliance agrees with your organization which standard and which <a style=\"color: #004250; font-weight: bold;\" href=\"https:\/\/brandcompliance.com\/en\/docs\/scope-of-certification\/\">proposed scope<\/a> will be assessed. You can indicate which aspects should receive additional attention. It is also agreed whether the assessment will be performed on site, remotely or using a combination of both audit methods.<\/p>\n<\/div>\n<div style=\"box-sizing: border-box; flex: 1 1 260px; padding: 28px 22px 22px; background-color: #ffffff; border: 1px solid #bdd3d7; border-top: 5px solid #004250; border-radius: 6px;\">\n<div style=\"display: flex; align-items: center; justify-content: center; width: 38px; height: 38px; margin: 0 0 16px; color: #ffffff; font-weight: bold; background-color: #5e9cae; border-radius: 50%;\" aria-hidden=\"true\">2<\/div>\n<h3 style=\"margin: 0 0 10px; color: #004250; font-size: 19px;\">Assess<\/h3>\n<p style=\"margin: 0;\">The auditor assesses the management system against the applicable standard requirements. Depending on the agreed extent of the assessment, documented information and available evidence are examined and interviews are conducted with management and employees.<\/p>\n<\/div>\n<div style=\"box-sizing: border-box; flex: 1 1 260px; padding: 28px 22px 22px; background-color: #ffffff; border: 1px solid #bdd3d7; border-top: 5px solid #004250; border-radius: 6px;\">\n<div style=\"display: flex; align-items: center; justify-content: center; width: 38px; height: 38px; margin: 0 0 16px; color: #ffffff; font-weight: bold; background-color: #5e9cae; border-radius: 50%;\" aria-hidden=\"true\">3<\/div>\n<h3 style=\"margin: 0 0 10px; color: #004250; font-size: 19px;\">Report<\/h3>\n<p style=\"margin: 0;\">The findings, observations and conclusions are documented in a report. The auditor provides general information about the certification process and may estimate when your organization could be ready to start the certification process.<\/p>\n<\/div>\n<\/div>\n<h2>Is a gap analysis part of the certification process?<\/h2>\n<p>No. A gap analysis is a voluntary assessment performed before the formal certification process. It is not a certification audit and does not result in a certification decision or certificate.<\/p>\n<p>The gap analysis does not replace:<\/p>\n<ul>\n<li>your organization\u2019s <a href=\"https:\/\/brandcompliance.com\/en\/docs\/internal-audit\/\">internal audits<\/a>;<\/li>\n<li>the management review;<\/li>\n<li>Stage 1 of the initial certification audit;<\/li>\n<li>Stage 2 of the initial certification audit;<\/li>\n<li>the independent certification decision.<\/li>\n<\/ul>\n<p>The findings from a gap analysis do not guarantee that the management system will meet all applicable requirements during the certification audit. The management system may change between the two assessments. In addition, different samples may be selected and additional evidence may be assessed during the certification audit.<\/p>\n<h2>What is the difference between a gap analysis and a Stage 1 audit?<\/h2>\n<div style=\"width: 100%; margin: 24px 0; overflow-x: auto; border: 1px solid #5E9CAE; border-radius: 6px;\">\n<table style=\"width: 100%; min-width: 680px; border-collapse: collapse; color: #004250; background-color: #ffffff;\">\n<thead>\n<tr>\n<th style=\"width: 50%; padding: 14px 16px; color: #ffffff; font-weight: bold; text-align: left; vertical-align: top; background-color: #004250; border-right: 1px solid #5E9CAE;\" scope=\"col\">Gap analysis<\/th>\n<th style=\"width: 50%; padding: 14px 16px; color: #ffffff; font-weight: bold; text-align: left; vertical-align: top; background-color: #004250;\" scope=\"col\">Stage 1 of the certification audit<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr style=\"background-color: #ffffff;\">\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE; border-right: 1px solid #5E9CAE;\">Voluntary assessment<\/td>\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE;\">Mandatory part of the initial certification audit<\/td>\n<\/tr>\n<tr style=\"background-color: #eef5f6;\">\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE; border-right: 1px solid #5E9CAE;\">Performed before the formal certification process<\/td>\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE;\">Performed as part of the formal certification process<\/td>\n<\/tr>\n<tr style=\"background-color: #ffffff;\">\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE; border-right: 1px solid #5E9CAE;\">Provides a snapshot of the current level of implementation<\/td>\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE;\">Assesses, among other aspects, whether the organization is ready for Stage 2<\/td>\n<\/tr>\n<tr style=\"background-color: #eef5f6;\">\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE; border-right: 1px solid #5E9CAE;\">The scope and depth are specifically agreed for the gap analysis<\/td>\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE;\">The audit objectives and audit activities follow from the certification requirements<\/td>\n<\/tr>\n<tr style=\"background-color: #ffffff;\">\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE; border-right: 1px solid #5E9CAE;\">Does not result in a certification decision<\/td>\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE;\">Produces audit results that become part of the certification file<\/td>\n<\/tr>\n<tr style=\"background-color: #eef5f6;\">\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE; border-right: 1px solid #5E9CAE;\">Does not replace Stage 1 or Stage 2<\/td>\n<td style=\"padding: 13px 16px; text-align: left; vertical-align: top; border-top: 1px solid #5E9CAE;\">Is followed by Stage 2 when the certification process can proceed<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>A gap analysis must therefore not be regarded as <a href=\"https:\/\/brandcompliance.com\/en\/docs\/initial-audit-stage-1\/\">Stage 1 of the initial certification audit<\/a> or as a replacement for the initial certification audit.<\/p>\n<h2 id=\"cost-gap-analysis\" style=\"scroll-margin-top: 120px;\">How much does an ISO gap analysis cost?<\/h2>\n<p>The duration and cost of a gap analysis depend on the proposed scope and the agreed depth. The following factors are considered:<\/p>\n<ul>\n<li>the selected standard or combination of standards;<\/li>\n<li>the proposed scope of the management system;<\/li>\n<li>the number of employees and locations within the scope;<\/li>\n<li>the nature and complexity of the processes;<\/li>\n<li>the complexity of the IT environment;<\/li>\n<li>the current level of implementation;<\/li>\n<li>the amount of documented information that must be assessed;<\/li>\n<li>the required depth of the assessment;<\/li>\n<li>whether the assessment is performed on site, remotely or using a combination of both methods.<\/li>\n<\/ul>\n<p>Following an initial introductory meeting, Brand Compliance can determine the appropriate extent of the assessment and prepare a quotation.<\/p>\n<h2>Discuss your gap analysis<\/h2>\n<p>Would you like your management system to be independently assessed before applying for certification? During a non-binding introductory meeting, we discuss the applicable standard, the proposed scope, the required depth and the information needed to prepare a quotation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Are you considering certification against an ISO standard or another standard, but are you unsure whether your management system has been sufficiently established and implemented?&#8230;<\/p>\n","protected":false},"author":6,"featured_media":16961,"parent":16202,"menu_order":15,"comment_status":"closed","ping_status":"closed","template":"layouts\/diensten-layout.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-13684","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/pages\/13684","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/comments?post=13684"}],"version-history":[{"count":5,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/pages\/13684\/revisions"}],"predecessor-version":[{"id":26941,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/pages\/13684\/revisions\/26941"}],"up":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/pages\/16202"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/media\/16961"}],"wp:attachment":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/media?parent=13684"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}