We would like to obtain our ISO 27001. We need to perform a gap analysis toward this end prior to engaging an auditor.

A full gap analysis will include developing a review plan for the organization, interviewing myself as the owner of the firm and chief technologist, and then working with team members to execute on the audit. The evaluation of evidence and creation of the gap analysis report could conclude the project, or it could conclude with assisting the team in producing the identified items to fill the gaps.

Minimally we will identify the gaps to fill pre-audit. Ideally, we will fill those gaps.