The GDPR self-assessment
70 requirements in 14 areas, linked to 78 ISO/IEC 27701:2025 controls (Tables A.1 for PII controllers, A.2 for PII processors, A.3 for information security) plus clauses 4-10:
- Principles, accountability, DPO and records of processing
- Lawfulness, consent, transparency and data subject rights
- Privacy by design, processors, security and breach management
- DPIAs, international transfers and special situations such as employees, children, marketing and AI
Start the free GDPR self-assessment →
ISO readiness: know your gaps before the audit
| Assessment | Scope |
|---|---|
| ISO/IEC 27001 readiness (Pro) | 63 requirements: clauses 4-10 and the 93 Annex A controls |
| ISO/IEC 42001 readiness | 65 requirements: clauses 4-10 and the 38 Annex A controls |
| ISO/IEC 20000-1 / ITSM maturity | 67 requirements: clauses 4-10 and the clause 8 processes, each cross-referenced to an ITIL practice |
All assessments score each requirement from 0 to 4 and run in your browser with no account and nothing stored on a server. The GDPR, ISO/IEC 42001 and ISO/IEC 20000-1 assessments are free, with a summary PDF; GoToCertify Pro (18 EUR including VAT, 45 days, all assessments) unlocks the ISO/IEC 27001 readiness assessment and adds guidance, the full report and Excel export.
Next step: the people who run the system
- Privacy: Privacy Foundation based on ISO 27701, the ISO 27701 Foundation simulator and ISO 27701 and PIMS explained
- Information security: ISO/IEC 27001 Foundation and Lead Auditor
- Service management: ISO/IEC 20000 Foundation
Exams are delivered online through GoToCertify.
The self-assessments are information tools, not legal advice or a certification audit.
