Know Exactly What
Needs to Change.
A gap analysis tells you precisely where your current systems fall short of ISO requirements. No guesswork, no surprises at the certification audit — just a clear, prioritised list of what needs to be done and in what order.
Your Current Systems Measured Against ISO Requirements
A gap analysis is a structured audit that compares your current management systems, processes and documentation against the specific requirements of an ISO standard. The output is a clear picture of where you comply, where you partially comply and where significant work is needed.
We often conduct gap analyses as part of an internal auditor training activity — which means you get two deliverables in one engagement: trained internal auditors and a completed gap analysis report.
The gap analysis becomes the foundation for your certification preparation action plan. Every item identified is prioritised, assigned to a responsible person and given a realistic due date.
All Major ISO Management System Standards
We can conduct gap analyses against the following standards, individually or as an integrated assessment.
AS/NZS ISO 9001 — Quality
The most widely held ISO standard. Covers customer focus, leadership, planning, support, operations, performance evaluation and continual improvement.
AS/NZS ISO 14001 — Environment
Environmental aspects and impacts, legal compliance, objectives and targets, operational controls. Increasingly required for government tender eligibility.
AS/NZS ISO 45001 — Safety
Hazard identification, risk assessment, legal requirements, incident management, emergency preparedness. Aligned with Australian WHS legislation.
AS/NZS ISO 31000 — Risk
Risk management framework, principles and guidelines. Applied across Strategic, Managerial and Process risk levels.
AS/NZS ISO/IEC 27001 — Information Security
Information security management, cyber risk, data protection and privacy obligations. Increasingly relevant for all organisations handling sensitive data.
ISO/IEC 42001 — AI Management
For organisations using AI tools in their operations. An emerging standard with growing compliance expectations, particularly in regulated industries.
How We Conduct a Gap Analysis
Structured, thorough and completed with minimal disruption to your operations.
Document review
We review your existing policies, procedures, records and management system documentation against the requirements of the relevant ISO standard.
Process observation
We observe your processes in operation to verify that documented procedures reflect reality and that requirements are being met in practice.
Personnel interviews
We speak with key personnel to assess awareness, competence and understanding of their obligations under the management system.
Gap report & plan
A comprehensive report identifying all gaps, their severity, a prioritised action plan and documentation requirements for successful certification.
Everything You Need to Plan Your Certification Journey
The gap analysis report is your roadmap to certification.
Clause-by-clause findings
Every requirement of the relevant ISO standard assessed and rated: compliant, partially compliant or non-compliant — with evidence notes.
Prioritised action plan
Every gap translated into a specific action, prioritised by severity and assigned to a responsible person with a realistic due date.
Documentation requirements
A clear list of the documents, records and policies that need to be created or updated to satisfy the standard’s requirements.
Implementation support
We can work through the action plan with you, developing the documentation and processes needed to close every gap identified.
Training recommendations
Where gaps relate to knowledge or awareness, we identify the specific training needed and can provide it as part of the engagement.
Certification pathway
A realistic timeline from gap analysis to certification audit, based on the scope and complexity of the gaps identified.
Find Out Where You Stand Against ISO Requirements
A gap analysis is the essential first step to ISO certification — and to understanding what your management system is actually missing. Call us to discuss your requirements.
1300 00 IIAU (1300 004 428)