You're considering ISO certification. Maybe a client demanded it. Perhaps you're exploring whether it makes sense for your business. Either way, you're facing the same question: what does getting certified actually involve?
A gap analysis gives you the answer. It's a comprehensive assessment of your current position against ISO requirements. You'll discover what processes you already have in place, what's missing, and exactly what work is needed to achieve certification. Think of it as a roadmap that shows you the journey before you start walking.
At ISO Adviser, we've conducted hundreds of gap analyses across every industry imaginable. We know you need honest answers about the effort and investment involved. We know you can't make informed decisions without understanding what you're signing up for. That's exactly what our gap analysis service provides—clarity before commitment.
What Is a Gap Analysis?
A gap analysis is a structured evaluation of your business against the requirements of an ISO standard. We examine your existing processes, documentation, and practices. We compare them systematically against what the standard demands. The gaps between your current state and certification requirements become crystal clear.
This isn't a theoretical exercise. We assess your actual operations—how work really happens, not how you think it happens or how you wish it happened. We review existing documentation, interview key staff, observe processes, and examine records. The result is a realistic picture of where you stand right now.
The assessment covers every requirement of your chosen standard. For ISO 9001, that means examining customer focus, leadership, planning, support, operations, performance evaluation, and improvement. For ISO 27001, we look at information security policies, risk assessment, asset management, access controls, and incident management. Each standard gets thorough examination across all its requirements.
Why Start With a Gap Analysis?
Jumping straight into certification without understanding the work involved is risky. You might underestimate costs, miss critical requirements, or discover halfway through that your organisation isn't ready. A gap analysis prevents these problems by providing complete visibility upfront.
Budget accuracy matters enormously. Without a proper assessment, you're guessing at costs. How much will documentation development cost? How many days of consulting support do you need? What internal resources are required? A gap analysis answers these questions with real data based on your actual situation. You can budget properly rather than facing unexpected expenses mid-project.
Timeline planning depends on understanding the scope. Some businesses achieve certification in three months. Others need twelve. The difference usually relates to how much groundwork already exists. Our gap analysis tells you which category you fall into. You'll know whether you're looking at a quick sprint or a steady marathon. That information helps you plan around other business priorities and meet client deadlines realistically.
Resource allocation becomes straightforward once you know what's needed. Who needs to be involved? How much of their time? What expertise gaps exist in your team? The gap analysis identifies these requirements early. You can assign responsibilities, arrange training, or bring in external help before starting the main project. Your team knows exactly what they're committing to.
Risk mitigation improves dramatically. Some gaps are easy to close—write a procedure, provide some training, done. Others require significant change—new systems, process redesign, cultural shifts. Discovering these difficult gaps during a gap analysis gives you time to address them properly. Finding them during certification audit preparation creates panic and often leads to failed audits.
What Our Gap Analysis Includes
Our assessment is thorough but proportionate. We dig deep enough to give you accurate information without consuming excessive time or disrupting your operations unnecessarily.
Documentation review examines everything you currently have. Quality manuals, procedures, work instructions, policies, forms, records—we review it all. We assess whether existing documentation meets ISO requirements or needs development. Sometimes businesses have excellent documentation that just needs minor updates. Other times, documentation is sparse or outdated. We tell you which situation applies to you and what actions are needed.
Process examination looks at how work actually flows through your organisation. We don't just read procedures—we observe operations and talk to people doing the work. Do processes match what documentation describes? Are they consistently followed? Do they achieve their intended results? These observations reveal gaps that documentation review alone might miss. We identify where processes need formalising, improving, or simply documenting properly.
Staff interviews provide insight into competence, awareness, and culture. We speak with management, operational staff, and support functions. Do people understand quality objectives? Can they describe their role in the management system? Do they know how their work contributes to customer satisfaction or information security? These conversations reveal training needs and cultural gaps that might affect certification success.
Records examination verifies whether you're generating and maintaining evidence of conformity. ISO certification requires proof that processes work as intended. Are you collecting the right data? Are records complete and accessible? Can you demonstrate traceability where required? Missing or inadequate records represent gaps that need addressing before certification.
Compliance mapping systematically compares your practices against every requirement of the chosen standard. We work through the standard clause by clause, identifying which requirements you meet fully, partially, or not at all. This detailed mapping becomes the foundation of your gap report and implementation plan.
What You'll Receive
Our gap analysis delivers tangible outputs you can use for decision-making and project planning.
Detailed gap report documents our findings comprehensively. For each standard requirement, we explain your current position and any gaps identified. The report uses plain language—you won't need an ISO expert to understand it. Management can read it and grasp exactly what certification involves. You can share it with colleagues who need to understand the project scope.
Prioritised action plan translates findings into practical next steps. Not all gaps are equally important or equally difficult to close. We prioritise actions based on importance, difficulty, and dependencies. Quick wins get highlighted—things you can fix easily that demonstrate progress. Complex challenges get identified early so you can plan properly. The action plan provides a realistic implementation sequence.
Resource requirements estimation tells you what's needed internally. How many person-days of effort? Which roles need involvement? What skills or knowledge gaps exist? You'll understand whether your current team can handle the work or whether external support makes sense. This helps with budgeting and resource allocation decisions.
Timeline projection provides realistic timeframes based on your specific situation. If you commit full attention, how quickly could you achieve certification? If you can only allocate part-time resources, how does the timeline extend? We give you options so you can choose a pace that balances speed with operational reality.
Cost estimation covers both consulting support and certification body fees. We provide transparent pricing for our services if you choose to work with us. We also explain certification audit costs based on your organisation size and scope. No surprises—just honest numbers you can use for budgeting and approval processes.
When Should You Get a Gap Analysis?
Several situations make gap analysis particularly valuable.
Exploring certification for the first time means you probably have lots of questions and limited knowledge of what's involved. A gap analysis provides the information needed for intelligent decision-making. Is certification achievable? What will it cost? How long will it take? You get answers before committing resources.
Tender requirements sometimes demand ISO certification by a specific date. You need to know quickly whether that deadline is realistic. Our gap analysis can be completed in days, giving you fast answers about feasibility. You can commit to tender deadlines confidently or negotiate more realistic timeframes based on factual assessment.
Budget planning cycles require accurate cost estimates. Finance teams need numbers for next year's budget. A gap analysis provides those numbers based on your actual situation rather than industry averages or guesswork. Your budget request stands on solid ground.
Previous failed attempts at certification might make you cautious about trying again. What went wrong last time? A fresh gap analysis identifies whether previous consultants missed critical gaps or whether your organisation wasn't truly ready. You can avoid repeating past mistakes.
Adding additional standards to existing certification benefits from gap analysis. If you hold ISO 9001 and want to add ISO 14001, how much overlap exists? What new elements are needed? The assessment shows you whether integration makes sense and what work is required. Many businesses discover that adding standards to existing systems takes less effort than they feared.
The Gap Analysis Process
Our approach is straightforward and minimally disruptive.
Initial briefing takes about an hour. We discuss your business, why you're pursuing certification, what standard you're considering, and any specific concerns or constraints. This conversation helps us tailor the assessment to your situation. We agree on scope, timing, and logistics.
On-site assessment typically takes one to three days depending on organisation size and complexity. We tour your facilities, observe operations, interview staff, and review documentation. Small businesses might need just one day. Larger, more complex organisations might need several days across multiple sites. We work around your schedule to minimise disruption.
Analysis and reporting happens after the site visit. We compile findings, identify gaps, develop recommendations, and create your gap report. This usually takes about a week. We're thorough but efficient—you get detailed findings without waiting months.
Results presentation brings everything together. We walk through the gap report with you, explaining findings and answering questions. You'll understand exactly what gaps exist and what's needed to close them. We discuss options for moving forward, whether that means working with us or proceeding independently.
Why Choose ISO Adviser for Your Gap Analysis
Our assessments provide genuine value because they're conducted by people who really understand ISO standards and business realities.
Experienced assessors conduct every gap analysis. Our consultants have worked across industries and hold relevant certifications themselves. Many have served as certification body auditors, so they know exactly what's checked during certification audits. That insider knowledge ensures our gap analyses are thorough and accurate.
Industry knowledge means we understand sector-specific challenges. Manufacturing businesses face different issues than professional services firms. Healthcare providers have different concerns than IT companies. We've worked across sectors and bring that breadth of experience to your assessment. Your gap analysis reflects industry realities, not generic textbook knowledge.
Honest reporting characterises our approach. We won't exaggerate gaps to make our consulting services seem more necessary. We won't minimise challenges to make the project seem easier than it is. You get truthful assessment of your position. That honesty serves you better than sugarcoating, even if it means acknowledging significant work ahead.
Actionable recommendations make our reports immediately useful. We don't just identify gaps—we explain how to close them. Practical suggestions. Realistic options. Clear priorities. You can take the gap report and start working on certification even without ongoing consulting support if that's what suits your business.
Flexible engagement means you're not obligated to continue working with us after the gap analysis. Some clients use the assessment to plan internal implementation. Others ask us to support the full certification project. Both approaches are fine. The gap analysis stands alone as a valuable service regardless of what comes next.
For a broader understanding of which standard might suit your business best, visit our ISO Standards Overview page.
Investment and Next Steps
Gap analysis pricing varies based on organisation size, complexity, and the standard being assessed. Contact us for a specific quote, but most gap analyses range from £1,500 to £5,000. That investment gives you clarity worth many times the cost by preventing expensive mistakes and enabling accurate planning.
The typical timeline from initial contact to completed report is two to three weeks. We can work faster if urgency demands it, though some businesses prefer spreading the assessment over several weeks to accommodate operational constraints. We adapt to your needs.
Starting is simple. Contact us with basic information about your organisation and which standard you're considering. We'll discuss your situation, explain what the gap analysis involves, and provide a fixed-price quote. Once you approve, we schedule the assessment at your convenience. Within weeks, you'll have complete clarity about your certification path.
Don't commit to ISO certification blindly. Get the facts first. Our gap analysis service provides the information you need for confident decision-making. You'll know exactly what's required, what it costs, and how long it takes. That knowledge protects your investment and increases your chances of certification success. Let's assess where you stand and map out your route to certification.