ISO 27001:2022 Information Security

ISO/IEC 27001:2022 is the leading international standard for an Information Security Management System (ISMS). It provides a systematic, risk-based approach to protecting the confidentiality, integrity and availability of information.

The 2022 revision updates the Annex A controls, reorganising them into four themes — organizational, people, physical and technological.

What the standard covers

• Information security risk assessment and treatment
• Annex A controls across organizational, people, physical and technological themes
• Access control and cryptography
• Supplier and incident management
• Continual monitoring and improvement

Key benefits of certification

• Protect sensitive data against breaches and cyber threats
• Win customer and partner trust
• Meet contractual and regulatory requirements
• Reduce the risk and cost of security incidents
• Gain a competitive edge in tenders

Who is it for?

ISO 27001 applies to organizations of any size or sector that store, process or transmit information and want to manage information security risk systematically.