Free tool · ISO 9001
ISO 9001 gap analysis: free five-minute self-assessment
An ISO 9001 gap analysis compares how your business runs today against what the standard requires, and tells you what is missing. It is the first sensible step for any business considering certification: before you can plan the work, you need to know the size of it.
The tool below does exactly that in about five minutes. Twenty-five plain-English questions, no jargon, no email required, and you get a clause-by-clause picture of where you stand, your three biggest gaps, and a straight recommendation on what to do next. It covers the newly published 2026 edition of the standard, and if you are already certified to the 2015 edition, it will show you your transition delta too.
✔ 25 questions, ~5 minutes ✔ No email required ✔ Covers ISO 9001:2026
Or, continue below..
Key takeaways
- A gap analysis answers “what’s missing?”; an internal audit answers “is it working?”. Do the first before you build, and the second once you have something running. A certification body expects to see the latter in your records, not the former.
- Answer honestly, and treat “not sure” as “no”. If you have to think hard about whether something exists in your business, it is not operating in any way an auditor would recognise.
- The gaps cluster in predictable places. Measurable objectives, competence records, supplier evaluation, and the Clause 9 and 10 machinery (satisfaction measurement, internal audit, management review, corrective action) are where most small businesses score lowest — because these only exist once a system genuinely runs.
- Your result is a map, not a survey. It tells you where the gaps are and how many; understanding how deep they run is what a proper review or coaching conversation is for.
- The 2026 edition changes the checklist, not the approach. ISO 9001:2026 published in September 2026, with a transition window to September 2029. Assessing against it now costs nothing extra and saves an awkward mid-project switch.
How to get an honest result
The tool works on one rule: if you are not sure, the honest answer is probably no. Certification auditors do not accept “I think we do that somewhere” as evidence, and neither should you. Answer for how the business actually runs today, not how it is supposed to run, and not how it will run once you have tidied a few things up. A flattering gap analysis is a waste of five minutes; an honest one is a plan.
It also helps to answer as the business, not as yourself. You may know exactly why every supplier was chosen; the question is whether the business could show it if you were on holiday.
What your result means
The tool scores each clause area and places you in one of four bands. Here is what each genuinely means, without the sugar-coating:
Early Days: 0-35%
You are starting more or less from scratch — which is honestly the easiest place to start, because there is nothing to unpick. Businesses in this band typically reach certification in three to six months with a clear plan. Start with the free ISO 9001 toolkit, which gives you the templates for everything the assessment just asked about, or have us coach you through the build if you would rather not do it alone.
Foundations in place: 36 – 60%
You run a real business with real processes; the gap is mostly evidence and structure rather than capability. This is the most common band for established SMEs, and also the band where DIY efforts most often stall — the remaining work is the unfamiliar part. The toolkit covers the documents; the coaching programme exists for exactly this situation.
Closing the gap: 61-85%
Much of a system exists, and the remaining gaps are specific and fixable. Read your three priority gaps carefully: at this level they are usually Clause 9 and 10 items, which take elapsed time to evidence (you cannot backdate a management review), so start them now even if certification is months away.
Audit-ready territory: 36 – 60%
You look close. What you need now is not more building but independent verification: an internal audit that tests the system the way your certification body will, and finds the problems while they are still free to fix. This is also the standard’s own requirement — you will need an internal audit on record before certification regardless.
If you are already certified and ran the tool in transition mode, your headline number is the 2026 delta: the new edition’s emphases (quality culture and ethics, climate context, the sharper split of risks from opportunities) that your 2015 system does not yet evidence.
None of them is urgent — transition runs to September 2029 — but all of them fold neatly into your next management review cycle, and our ISO 9001:2026 article covers each in plain English.
Gap analysis vs internal audit
These get confused constantly, and the difference matters to your certification body. Same skeleton, different question, different rigour:
GAP ANALYSIS
A one-off, before you build. It compares your business against the standard and asks what is missing.
INTERNAL AUDIT
Recurring, after you build. It examines a live system, with evidence and sampling, and asks whether it is working.
The practical consequence: a gap analysis result, however thorough, does not satisfy Clause 9.2. Before certification you will need at least one genuine internal audit on record, conducted with appropriate independence. Our ISO 9001 audit checklist page explains how to run one properly, including the free five-document audit pack, and if independence is your problem (in small firms it usually is), the fixed-fee internal audit service solves it for £1,950.
Why do a gap analysis now?
Because the timing is unusually good. ISO 9001:2026 was published on 16 September 2026, and certification bodies will spend most of the next year becoming accredited to audit against it — the first 2026 certificates are unlikely before late 2027. That creates a calm window: assess yourself against the current edition today, build or transition without deadline pressure, and arrive at your next audit ahead of the queue rather than in it.
Businesses that treated the 2015 transition this way had a cheap, unhurried change; the ones that started in the final year paid for the delay in money and stress.
Frequently asked questions
How long does the gap analysis take?
About five minutes. Twenty-five questions, multiple choice, no preparation needed.
Is it really free? Do I have to give you my email?
Yes, and no. Your results appear on screen regardless. The email option exists only if you want the report sent to you.
Will you see my answers?
No. Your answers stay in your browser. The only thing that reaches us is the report email, if you ask for one.
Does it cover ISO 9001:2026?
Yes. The core assessment covers the full standard, and a dedicated section covers the 2026 edition’s new emphases. If you are certified to 2015, run it in transition mode and you will get your 2026 delta.
Is this the same as your audit checklist?
They are cousins. This tool is the fast, guided version for a first look. The audit checklist and internal audit pack is the full working document set for when you audit the system properly. Many people start here and graduate to the pack.
What should I do with my results?
The results page tells you, based on your band. If you would rather talk it through, book a free discovery call — bring your results, and Fiona will tell you honestly what they mean and what she would do in your position.
About the author
Fiona Parker
Fiona Parker is a BSI-qualified Lead Auditor in ISO 9001 and leads the quality management practice at Iseo Blue. Before auditing other people’s systems she spent six years running one, taking an integrated ISO 9001, 14001 and 45001 system from first build through certification and four years of surveillance.