Gap analysis: the starting point on the road to ISO certification

2026-09-27 6 min readBy the ICS technical team

Many companies decide to certify without knowing how far they really are from the standard. Some believe they are missing everything and postpone the project; others believe they already comply and arrive at the audit with surprises. A gap analysis exists to replace those assumptions with a concrete diagnosis.

What a gap analysis is

It is an assessment of your organization’s compliance against the requirements of a standard, identifying the gaps — what is missing or not met — and the improvement opportunities, in order to help close them and prepare for certification. What the standard asks for is compared, requirement by requirement, with what the company does and can demonstrate.

What it assesses

• The scope and context of the organization, and whether they are well defined for the chosen standard.
• The processes within scope and how they are controlled in practice.
• Existing documentation: what exists, what is missing and what is unnecessary.
• The records that demonstrate the system works.
• Legal and client requirements that apply to your activity.
• Management elements: objectives, indicators, risks, internal audit and management review.

What it delivers

A clear report with each gap identified, its importance and what is needed to close it, together with the improvement opportunities found. With that report you can estimate the real effort, set priorities and fix a reasonable date for the certification audit.

How is it different from a pre-audit?

A gap analysis is usually done at the beginning, to learn what is missing and plan the implementation. A pre-audit is done later, when the system is already running, to confirm it is ready before the formal audit. One tells you where to start; the other confirms you have arrived.

When it pays off

• Before starting the implementation of an ISO standard.
• When a client or a tender requires certification and you need to know whether you can make it in time.
• When moving to a new version of a standard, to identify what changed for your company.
• When you want to add a second standard to a system you already have.

The real value

A gap analysis avoids two costly mistakes: building what already exists and discovering too late what is missing. That is why, for most companies, it is the most cost-effective first step on the road to certification. If you want to know what information we need to quote it, we explain it in this guide.