Attest · Sample Report

See exactly what an ISO 27001 readiness assessment looks like

This is a real Touchpoint Security Attest deliverable — a 12-page ISO/IEC 27001:2022 Annex A gap assessment, redacted for a fictional client. Every section, chart and finding format is exactly what you'd get, just with the names changed.

93Annex A controls assessed across all four 2022 themes
4Control themes scored separately: Organisational, People, Physical, Technological
180Days in the sequenced, certification-ready roadmap, gated at day 30/90/180
3Findings shown: one full gap, plus two passing controls, so you see both sides

What's inside

01
Executive summaryOverall maturity, the percentage at or above target, and what's holding the organization back.
02
Scope and approachAll 93 Annex A controls in scope, the method (structured workshops plus evidence review), and the rating scale used.
03
Key findingsPriority findings ranked by risk, each with an Annex A reference and a severity rating.
04
Maturity by Annex A themeA bar chart scoring all four 2022 themes against your target maturity level.
05
Remediation roadmapA phased 180-day plan with named work streams, go/no-go exit criteria at each gate, and effort estimates.
06
Detailed findingsOne full example: what we asked, what the evidence showed, the score reasoning and a numbered recommendation — plus two representative passing controls, so you see what "pass" looks like too, not just what's wrong.
A–B
AppendicesThe five-level rating scale we use on every safeguard, and an evidence register extract.

Get the sample report

Enter your work email and we'll unlock the download and send you a copy.

By submitting, you agree to receive this report by email. See our privacy policy. Unsubscribe anytime.

Why this is useful before you talk to us

Most compliance vendors describe their reports in a sales call. We'd rather show you one. This sample uses the same five-level rating scale, the same evidence-backed scoring, and the same finding format that a real Attest ISO 27001 readiness assessment produces — including examples of controls that already pass, not just the ones that need work.

One thing worth being clear on: certification itself is issued by an accredited certification body, not by us. Attest gets you ready for each stage and keeps the evidence organized for your auditor. If what you see here looks like the kind of structure your next audit needs, talk to us about an assessment of your own environment.

Want this for your own environment?

Attest runs the full ISO 27001 gap assessment and keeps your roadmap current, with evidence pulled straight from Pulse and Trace.

Explore ISO 27001 readiness