ISO Gap Analysis
Free ISO Gap Analysis Tools
Self-scoring readiness spreadsheets. Rate each requirement as documented and implemented, and get an instant readiness percentage by clause — plus the recommended next step for closing every gap you find. Free to download, and yours to run internally as often as you like.
ISO 9001:2015
Score your quality management system against every ISO 9001 clause and see exactly where your biggest gaps are.
- Documented / Implemented scoring
- Readiness dashboard by clause
- Recommended next steps built in
ISO 13485:2016
Assess your medical-device QMS against the ISO 13485 requirements — including design controls, sterilization, and servicing.
- Documented / Implemented scoring
- Readiness dashboard by clause
- Recommended next steps built in
ISO 14001:2015
Rate your environmental management system against ISO 14001 and track toward the 2026 revision — from environmental aspects and compliance obligations through performance evaluation.
- Documented / Implemented scoring
- Readiness dashboard by clause
- Recommended next steps built in
Not sure where to start, or want expert eyes on your results?
What's Inside Each ISO Gap Analysis Tool
Every ISO gap analysis tool on this page is built the same way, so the workflow is identical whether you are scoring quality, medical device, or environmental requirements. Each clause of the standard appears as its own row. You score it twice — once for whether the requirement is documented, and once for whether it is actually implemented in practice. That two-axis scoring is deliberate: most organizations discover their real exposure sits in the space between a procedure that exists and a procedure people follow.
The spreadsheet totals your scores into a readiness dashboard by clause, so you can see at a glance which sections of the standard are solid and which will draw an auditor's attention. Each row also carries a recommended next step, which means the output is a work list rather than a report you file away.
How to Run Your ISO Gap Analysis
Download the tool for your standard, then work it in four passes. Most teams complete a first pass in a day or two.
Go clause by clause and mark whether a controlled document exists. Be strict — a draft on someone's desktop is not a controlled document.
This is the pass that matters. Ask whether the people doing the work actually follow it, and whether you could show an auditor evidence.
Your lowest-scoring clauses are your priority. A clause scoring high on documentation and low on implementation is the classic finding an auditor writes up.
An ISO gap analysis that produces no assignments has not changed anything. Every gap needs a name and a date beside it.
Run it with the people who own each process rather than about them. The data is sharply better, and the corrective actions land far faster when the people who have to make the change helped find the gap.
How to Use Your ISO Gap Analysis Results
Your ISO gap analysis is only worth the time it takes if it drives action. Work the findings with the team that owns each process, agree on owners and timelines, and fold the corrections into your normal improvement cycle rather than running them as a separate project. Certified organizations can use the same tools as a structured self-check between surveillance audits — a way to confirm the system still reflects the intent of the requirements, not just the paperwork that satisfies them.
Want the full guide for your standard? Each one covers what to score, how to prioritize, and what to fix first.
→ ISO 9001 Gap Analysis: The Proven Path to Real Readiness
→ ISO 13485 Gap Analysis: The Proven Path to QMSR Ready
→ ISO 14001 Gap Analysis: Why the 2026 Transition Wins
Why Run Your ISO Gap Analysis With MSI
For 28 years Management Systems International (MSI) has guided organizations from first assessment through certification — 80+ certifications supported, 200+ audits attended, and 600+ professionals trained across manufacturing, technology, medical device, government, healthcare, and other regulated industries. These tools are built from what MSI has watched registrars actually test across 200+ certification audits.
Your ISO gap analysis tells you where you stand before you commit budget to a full implementation. When you are ready to close what it surfaces, our ISO consulting services take it from there — and if you would rather have the whole path run for you, SurePath is MSI's turnkey route from decision to certificate. Call 760-434-9141 to plan a session.
ISO Gap Analysis: Common Questions
Is the ISO gap analysis tool really free?
Yes. Download any of the three spreadsheets, use them internally as often as you like, and there is no obligation to engage MSI. The tools are self-scoring and require no consultant to run.
Which standard should I score first?
Score the standard your customers or regulators are asking about. Organizations pursuing more than one usually start with ISO 9001, because its clauses form the backbone the others build on — once a quality management system is in place, adding ISO 14001 or ISO 45001 typically adds only a few system elements rather than a new infrastructure.
How often should we run an ISO gap analysis?
Before a certification decision, and then annually as a self-check. Organizations typically report that an annual ISO gap analysis catches drift long before a surveillance audit does — which is the entire point of running one.
Do we need a consultant to interpret the results?
No. The dashboard is designed to be read by the team that owns the processes. That said, if your scores are ambiguous or the scope is large, a planning session with MSI turns the raw readiness percentage into a sequenced implementation plan.