audit-prep

An ISO 27001 audit readiness assessment loads prior engagement documents to identify gaps against mandatory ISMS documents and SoA mappings. It applies a structured framework across the engagement lifecycle, outputting a Readiness Report with a go/no-go verdict and a prioritized punch list.

Stage 1 ISO 27001 audit preparation focuses on documentation inventory and readiness assessment against mandatory ISMS documents and SoA mappings. Stage 2 preparation checks implementation evidence for high-risk controls and provides go/no-go recommendations before the final audit review.

To generate an audit punch list, load your existing engagement documents from the ./engagements directory and run a structured readiness assessment. The skill automatically surfaces gaps and outputs a formatted Markdown Readiness Report containing a prioritized punch list for auditor review.

Yes, you need a defined control checklist to rate items and assess ISO 27001 audit readiness. The skill requires this checklist alongside access to your ./engagements directory to evaluate documentation and evidence, producing a formatted Markdown Readiness Report with a stage-specific verdict.

Yes, evaluating ISO 27001 implementation evidence for high-risk controls is a core feature of Stage 2 audit preparation. The skill checks this evidence against your defined control checklist and provides specific go/no-go recommendations to determine if you are ready for auditor review.

The ISO 27001 audit readiness report uses a formatted Markdown structure suitable for auditor review. It includes a stage-specific go/no-go verdict, a prioritized punch list of identified gaps, and a complete engagement checklist to guide your remediation efforts.