ISO 27001 Readiness Checker
Answer 25 structured questions across six readiness areas and receive an indicative score.
Open ISO 27001 Readiness CheckerFree Website Tool
ISO 27001 Risk Score Calculator
Describe a risk, score likelihood and impact, consider existing controls and compare the residual risk using a transparent 5×5 method.
Tool summary
- Method
- Likelihood × Impact
- Assessments
- Inherent and residual
- Storage
- Current browser session
- Access
- Available free
Structured assessment
Build a consistent risk record
Work through five clear steps, then add the result to a professional session register.
Scoring methodology
Customize likelihood and impact labels, rating bands and the acceptance threshold.
Edit likelihood and impact labels
Likelihood
Impact
Step 1
Describe the Risk
Risk statement
Step 2
Assess Inherent Risk
Impact →
Likelihood →
Step 3
Consider Existing Controls
Step 4
Assess Residual Risk
Step 5
Treatment Decision
Session output
Risk Register
Build a working register for this browser tab.
| Risk | Owner | Inherent Risk | Existing Controls | Residual Risk | Treatment | Decision |
|---|
Practical guidance
Use risk scoring consistently
Likelihood × impact provides a transparent comparison method; ISO 27001 does not mandate this exact matrix. Define criteria appropriate to your context, record existing controls, and retain the judgement behind treatment and acceptance decisions.