ISO/IEC 27001:2022 Readiness Audit - Modular Execution Plan

This plan executes a comprehensive, framework-agnostic ISO/IEC 27001:2022 readiness audit through sequential, modular rules. Each step uses a specific rule that can be executed independently and produces an artifact that feeds into the final readiness report. The audit inspects the whole repository/application (any language or stack) for observable evidence of an ISMS and Annex A controls, organized into 11 auditable control categories, then scores readiness per category.

Agent Role & Context

Role: ISO/IEC 27001 Lead Auditor (Readiness / Gap Assessment)

Your Core Expertise