ISO 9001 gap analysis
A gap analysis compares how your organisation works today with what ISO 9001 requires, so you know exactly what to fix before a certification audit. This guide explains how to do one, and the free tool and checklist do the bookkeeping for you.
01What ISO 9001 covers
ISO 9001 sets the requirements for a quality management system (QMS): how you understand customer needs, control your processes, and keep improving. Like other ISO management system standards it follows the same structure of clauses 4 to 10: context, leadership, planning, support, operation, performance evaluation and improvement.
ISO 9001:2026 was published on 16 September 2026. It adds requirements on quality culture and ethical behaviour, treats risks and opportunities separately and strengthens change management. Organisations certified to ISO 9001:2015 have until 30 September 2029 to transition. The Paperwing tool follows the 2026 clauses.
02How to run the gap analysis
- Define the scope: which sites, products and services the QMS covers.
- Go through each clause and rate it: conforms, partly conforms, gap or not applicable.
- Record evidence for every answer: procedures, records, interview notes.
- Turn each gap into a corrective action with an owner and a due date.
- Re-assess after the actions are done, then plan an internal audit.
03Where organisations usually have gaps
- 4.1–4.2: context and interested parties not documented or reviewed.
- 6.1: risks and opportunities identified once and never updated.
- 7.2: competence records incomplete.
- 9.1: quality objectives measured without data.
- 9.3: management reviews missing required inputs.
04Using the free Paperwing gap assessment
The online tool lists every clause with guidance on what auditors look for. You rate each one, attach evidence notes, assign corrective actions and see completion and conformity scores. It produces a gap report as PDF or HTML. Everything is stored in your browser, nothing is uploaded, and you can export an encrypted backup.
Frequently asked questions
How long does an ISO 9001 gap analysis take?
For a small organisation, one to three days of interviews and document review; larger or multi-site organisations take longer.
Do I need a consultant?
Not necessarily. A structured checklist and honest evidence are enough to find most gaps; consultants help with interpretation and speed.
Is a gap analysis the same as an internal audit?
No. A gap analysis is a readiness check, usually before the system is complete. An internal audit checks a working system against the standard and your own procedures.