How well is our ISMS running?
Operational effectiveness · shared nonconformity base with the ISO view
- Demonstrated effectiveness
- 8 of 12 categories assessed in this pack
Categories · weakest first
IAM
—
Unevaluated · No topic in this pack
Not in this packSupplier
75 %
Action needed · 1 of 1 topics in this pack
Report ↗Secure Engineering
25 %
Critical · 1 of 6 topics in this pack
Not in this packSecure Operations
0 %
Critical · 1 of 5 topics in this pack
Not in this packGovernance
71 %
Action needed · 1 of 1 topics in this pack
Report ↗ISMS foundation
83 %
Action needed · 1 of 1 topics in this pack
Report ↗Improvement
0 %
Critical · 1 of 1 topics in this pack
Report ↗Control identity
0 %
Critical · 1 of 1 topics in this pack
Report ↗Certification
0 %
Critical · 1 of 1 topics in this pack
Report ↗ISMS implementation
0 %
Critical · 1 of 1 topics in this pack
Report ↗People & Awareness
100 %
Stable · 1 of 1 topics in this pack
Report ↗Cross-framework
—
Unevaluated · No topic in this pack
Not in this packTop 5 · Nonconformities
In-pack nonconformities only. Kernel FAIL first. Unevaluated artefacts are not listed.
02
ISMS foundation
This pack cites neither a policy nor operating evidence.
Nonconformity ↗03
c4
Named evidence is present, but effectiveness is not shown.
Nonconformity ↗04
ISMS implementation
Named evidence is present, but effectiveness is not shown.
Nonconformity ↗05
c5
Named evidence is present, but effectiveness is not shown.
Nonconformity ↗
How well is fulfilment of the standard demonstrated?
ISO/IEC 27001:2022 · Clauses 4–10 and applicable Annex A controls
Clauses
7 of 7 clause groups assessed in this pack
Annex A · applicable controls
3 of 4 Annex A themes assessed in this pack. SoA exclusions listed, not counted as fulfilled.
Clauses 4–10
Clause groups in this pack. Annex A lives in the box beside this one.
4 · Context
0 %
Critical · 1 of 4 controls cited in this pack
Report ↗5 · Leadership
0 %
Critical · 1 of 3 controls cited in this pack
Report ↗6 · Planning
17 %
Critical · 6 of 6 controls cited in this pack
Report ↗7 · Support
20 %
Critical · 5 of 5 controls cited in this pack
Report ↗8 · Operation
0 %
Critical · 3 of 3 controls cited in this pack
Report ↗9 · Performance evaluation
0 %
Critical · 3 of 3 controls cited in this pack
Report ↗10 · Improvement
0 %
Critical · 2 of 2 controls cited in this pack
Report ↗Annex A controls
Applicable per SoA. Exclusions are listed, not counted as fulfilled.
A.5 · Organizational
5 %
Critical · 21 of 37 controls cited in this pack
Report ↗A.6 · People
0 %
Critical · 4 of 8 controls cited in this pack
Report ↗A.7 · Physical
—
Unevaluated · Not in this pack
Not in this packA.8 · Technological
3 %
Critical · 7 of 33 controls cited in this pack
Report ↗
Report ↗
Exclusions with justification
SoA N/A · not counted as fulfilled
Top NC · Clauses
Nonconformities anchored on clauses 4–10. Control NCs are in the box beside this one.
05
4.4
Named evidence is present, but effectiveness is not shown.
Nonconformity ↗Top NC · Controls
Nonconformities anchored on Annex A. Clause NCs stay in the clause box.
01
A.5.1
This pack cites neither a policy nor operating evidence.
Nonconformity ↗02
A.5.2
This pack cites neither a policy nor operating evidence.
Nonconformity ↗03
A.5.3
This pack cites neither a policy nor operating evidence.
Nonconformity ↗04
A.5.4
This pack cites neither a policy nor operating evidence.
Nonconformity ↗05
A.5.5
Named evidence is present, but effectiveness is not shown.
Nonconformity ↗
● <70 % Critical● 70–89 % Action needed● ≥90 % Stable● Grey: unevaluated
Layout simulation: assessed rows equally weighted; percentages only where this pack has a mapped topic. Unevaluated rows are not scored. Signals and potentials are illustrative.
Topic reports in this pack
Category and standard slices
