Skip to content

Gap and readiness

6 skills in this category.

First gap assessmentUse this skill when a company starts a compliance programme and needs to know how far it is from a framework, and asks "run a gap analysis", "how ready are we for the audit", "baseline us against the…Gap and readinessGeneral, ISO 27001, SOC 2, HIPAA, NIS 2, ISO 42001Tristan Roth
GRC setup reviewUse this skill when someone wants to know where to start with the grcskills library, or asks "review my GRC setup", "what should I fix before the audit", "which compliance skills do I need", "audit…Gap and readinessGeneral, ISO 27001, SOC 2, GDPR, NIS 2, DORA, ISO 42001, EU AI ActTristan Roth
Multi-framework overlap mapUse this skill when a company answers to two or more frameworks and is collecting the same evidence twice, and asks "map our controls across frameworks", "crosswalk between our certification and our…Gap and readinessGeneral, ISO 27001, SOC 2, NIS 2, NIST CSF, GDPRTristan Roth
NIS 2 entity applicability checkUse this skill when a company needs to know whether the NIS 2 Directive applies to it, and asks "are we in scope of NIS 2", "are we an essential or important entity", "which country supervises us"…Gap and readinessNIS 2Tristan Roth
Scope statement draftingUse this skill when a team must define what its management system covers before a certification project, or its current scope is one vague sentence, and asks "write our ISMS scope", "what should be…Gap and readinessISO 27001, ISO 27701, ISO 42001Tristan Roth
Stage 1 readiness walkUse this skill when a certification audit is booked and the team wants to know whether the first stage will go through, and asks "are we ready for stage 1", "pre-audit readiness check", "what will…Gap and readinessISO 27001, ISO 27701, ISO 42001Tristan Roth