Gap Analysis & Pre-Audit Diagnostic

What is a Gap Analysis?

A gap analysis is a structured assessment that compares your organisation's current practices, controls, and documentation against the requirements of a target standard or program — and identifies what is missing, partially addressed, or not yet in place. It is the essential first step before any management system implementation or certification project.

Rather than discovering gaps during a certification audit (which can result in non-conformities, delay, and additional cost), a gap analysis gives you a clear, prioritised picture of what needs to be done before you commit to full implementation. For organisations with existing management systems, a gap analysis also reveals where existing practices already meet requirements — avoiding duplication and reducing implementation effort.

RKM conducts gap analyses against all standards we consult on: ISO 9001, IATF 16949, ISO 14001, ISO 45001, ISO 27001, ISO 20000, ISO 22000, ISO 13485, ISO 28000, AEO (PMK 137/2023), C-TPAT, and Integrated Management Systems.

Who needs it?

• Organisations considering ISO certification for the first time who want to understand the investment required before committing
• Companies preparing for surveillance or recertification audits who want an independent assessment before the certification body arrives
• Organisations that have received non-conformities at audit and want to understand the scope of remediation required
• Companies that have implemented a management system informally and want to know how close they are to certification readiness
• Management teams needing a business case for ISO implementation who require a credible estimate of effort and cost
• Organisations evaluating multiple standards simultaneously who want to understand which to pursue first and in what sequence

What a RKM gap analysis covers

A gap analysis engagement is structured around the requirements of the target standard, clause by clause. For each requirement, we assess:

• Current state — what controls, documentation, or practices exist today
• Gap — what is missing or not yet conforming to the requirement
• Priority — critical gap (will result in a major non-conformity at audit), significant gap (likely minor non-conformity), or advisory improvement
• Effort estimate — indicative effort to close the gap, providing input to implementation planning

For management system standards, the assessment covers both the documentation (policies, procedures, records) and the implementation evidence (records of internal audit, management review, corrective actions, training). A documented system that exists only on paper and is not operational generates the same non-conformities as no system at all.

Benefits of a gap analysis

• De-risk certification — know your gaps before the certification auditor does, and address major non-conformities before they affect your certification timeline
• Realistic planning — understand the actual scope of work required, not a generic estimate, so you can plan resources, timeline, and budget accurately
• Quick wins identification — some gaps are trivial to close; a gap analysis identifies these alongside the substantive gaps, enabling early momentum
• Independent perspective — an external RKM assessment often identifies gaps that internal teams have overlooked due to familiarity with existing practices
• Management buy-in — a written gap report from an independent consultant provides credible evidence for management investment decisions
• Sequence optimisation — for organisations pursuing multiple standards, a gap analysis identifies shared requirements and recommends an implementation sequence that minimises total effort

Our process — from kickoff to certificate in 4 steps

1. Gap Analysis. This is the primary engagement — document review and on-site or virtual assessment covering all standard requirements. Typically 1-3 days depending on standard and organisation size.
2. Documentation. We produce a written gap report: clause-by-clause findings, prioritised gap register, effort estimates, and an indicative implementation roadmap.
3. Implementation & Training. For organisations proceeding to full implementation, the gap analysis transitions directly into the implementation phase, with the gap report as the project plan.
4. Certification Audit Support. For organisations close to certification readiness, the gap analysis findings inform targeted pre-audit remediation and audit preparation.

What you'll get

• Written gap analysis report (clause-by-clause assessment)
• Prioritised gap register (critical, significant, advisory)
• Indicative effort and timeline estimate for gap closure
• Implementation roadmap with recommended sequencing
• Management presentation of findings (optional)
• Quotation for full implementation engagement if required

Why RKM for gap analysis

RKM gap analyses are conducted by the same consultants who implement management systems and support certification audits. This matters: a consultant who understands what certification body auditors look for — and what typically causes non-conformities — produces a gap analysis that reflects real audit risk, not just a checklist review.

We conduct gap analyses as standalone engagements, not just as a sales step toward a larger consulting contract. Some clients use our gap analysis to confirm readiness before the certification audit and then manage implementation themselves. Others use it as the foundation for a full RKM implementation engagement. Either approach is valid, and we design the engagement accordingly.

Frequently Asked Questions

How is a gap analysis different from a pre-audit? A gap analysis is typically conducted early — before implementation begins — to scope the work required. A pre-audit (or pre-certification audit) is conducted near the end of implementation, simulating the certification audit to check readiness. Both are valuable; RKM offers both as distinct services.

How long does a gap analysis take? For a small to medium-sized organisation assessed against a single standard, typically 1 day on-site plus 2-3 days for report preparation. Larger organisations, multiple sites, or multiple standards require proportionally more time.

Do you conduct gap analyses remotely? Yes — document review can be conducted remotely. For operational standards (ISO 14001, ISO 45001, IATF 16949, ISO 22000) where on-site evidence of implementation matters, an on-site element is preferable. We discuss the most appropriate format during the scoping call.

What information do you need from us before a gap analysis? Advance copies of existing documentation — quality manual, procedures, policies, previous audit reports, management review records — allow us to maximise on-site time on interviews and evidence review rather than reading documents. We provide a document request list before the engagement.

Does a gap analysis guarantee certification success? No. A gap analysis identifies gaps as of the assessment date. It is accurate only to the extent that we have access to all relevant information. The certification audit assesses your actual system at the time of the audit, which may differ. However, a well-conducted gap analysis and the subsequent remediation substantially reduce certification risk.

Can a gap analysis cover multiple standards at once? Yes. Multi-standard gap analyses are common for organisations planning an Integrated Management System. We assess all standards in scope simultaneously, identifying shared requirements that can be addressed once and standard-specific gaps that require separate attention.

How much does a gap analysis cost? Gap analysis fees depend on the number of standards, organisation size, number of sites, and the level of documentation review required. We provide a fixed-fee quote after a free scoping call.