Free · ten minutes
How ready are you for ISO 28000 certification?
Answer fifteen questions on the requirements of ISO 28000:2022, in four steps. Your readiness report, with your score for each area and your priority actions, is sent to your e-mail.
Standard: ISO 28000:2022Choose a different standard
Keep exploring
More quick readiness checks
What the ISO 28000 readiness check covers
The check measures your organisation against ISO 28000:2022 in fifteen questions, grouped into four areas: Context, scope and leadership; Security risk assessment and planning; Operational security controls; and Evaluation and improvement. Each answer is scored and weighted; the questions marked “Double weight” are the ones certification bodies examine first.
What you get
An overall score with one of four readings — Audit-ready, Nearly there, Gaps to close or Starting out — a score for each of the four areas, the priorities to fix first and the typical next step towards ISO 28000 certification.
How to use it
Answer from evidence rather than intention: if a control exists on paper but is not operating, score it as not operating. Share the result with the people who own each area, and use the ISO 28000 hub for the requirements, the route to ISO 28000 certification and what it costs.
Questions people ask
Is the ISO 28000 readiness check free?
Yes. It is free, takes about ten minutes and sends your readiness report to your e-mail, with no obligation.
Is this a certification audit or a certificate?
No. It is a self-assessment that shows where you stand before the real thing. Certification is granted by an accredited certification body after its own audit. Sterling's expert and experienced consultants prepare organisations for that audit; Sterling does not certify.
What happens after I receive my ISO 28000 score?
Your report shows the areas to fix first and the typical next step towards ISO 28000 certification. If you want help with the result, a Sterling consultant can walk through it with you in a free discovery call.