This document describes current information security practices and how they compare with the requirements of ISO 27001. The purpose of the compliance assessment is to identify the gaps (Gap Analysis) between the current situation and the required requirements, advising on necessary improvements.