CORAA

ISO 27001 Stage 1 Readiness Checklist (Word)

Check scope, risk assessment, SoA, internal audit and management review before the stage 1 review.

Free · CORAA original — SA-aligned
Updated 17 Oct 2026
Stage
Before stage 1 review
Needs
Documents and records
Also
One internal audit done
Format
Editable Word
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

ISO 27001 Stage 1 Readiness Checklist — ___

Scope / period: ___ | Prepared by: ___ | Reviewed by: ___ | Date: ___

Use this before the certification body's stage 1 review, which looks at whether the system is documented and ready for the stage 2 audit. Check the current edition of the standard and your certification body's own requirements for what it asks to see.

Agree with the certification body the dates, sites and people the auditors need access to. Close the gaps before stage 2; a stage 1 finding left open can delay certification.

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

What does stage 1 look at?
Whether the system is documented and ready for the stage 2 audit. Check your certification body's requirements for what it wants to see.
Related templates

You might also need.

ISO/IEC 27001 Statement of Applicability Template
Generate an ISO 27001 Statement of Applicability template with control, theme, applicability, reason, implemen
Gap Analysis Template
Generate a gap analysis template with requirement, current state, gap rating, risk, action, owner and target d
SOC 2 Readiness Checklist
Generate a SOC 2 readiness checklist against the Trust Services Criteria: scope, governance, access, change ma