standard

ISO/IEC 27001:2022

ISO/IEC 27001:2022 Annex A

In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)

Record JSON · Open in map · Data retrieval guide

Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.

Attributes

category

iso-27001

authority

framework

Details

authority

framework

version

2022

publicationDate

2022-10-25

amendmentState

Amd 1:2024

effectiveDate

Not provided

source_url

Not provided

reviewed_at

Not provided

note

Not provided

propositions

Source

No record-specific source URL is provided.

Connections

• A.8.33 — Test information belongs_to ISO/IEC 27001:2022

• A.8.32 — Change management belongs_to ISO/IEC 27001:2022

• A.5.21 — Managing information security in the ICT supply chain belongs_to ISO/IEC 27001:2022

• A.7.1 — Physical security perimeters belongs_to ISO/IEC 27001:2022

• A.8.29 — Security testing in development and acceptance belongs_to ISO/IEC 27001:2022

• A.7.7 — Clear desk and clear screen belongs_to ISO/IEC 27001:2022

• A.5.18 — Access rights belongs_to ISO/IEC 27001:2022

• A.8.26 — Application security requirements belongs_to ISO/IEC 27001:2022

• A.5.35 — Independent review of information security belongs_to ISO/IEC 27001:2022

• A.8.17 — Clock synchronization belongs_to ISO/IEC 27001:2022

• A.7.14 — Secure disposal or re-use of equipment belongs_to ISO/IEC 27001:2022

• A.6.6 — Confidentiality or non-disclosure agreements belongs_to ISO/IEC 27001:2022

• A.8.27 — Secure system architecture and engineering principles belongs_to ISO/IEC 27001:2022

• A.8.7 — Protection against malware belongs_to ISO/IEC 27001:2022

• A.5.27 — Learning from information security incidents belongs_to ISO/IEC 27001:2022

• A.7.3 — Securing offices, rooms and facilities belongs_to ISO/IEC 27001:2022

• A.5.9 — Inventory of information and other associated assets belongs_to ISO/IEC 27001:2022

• A.5.24 — Information security incident management planning and preparation belongs_to ISO/IEC 27001:2022

• A.7.13 — Equipment maintenance belongs_to ISO/IEC 27001:2022

• A.5.23 — Information security for use of cloud services belongs_to ISO/IEC 27001:2022

• A.8.34 — Protection of information systems during audit testing belongs_to ISO/IEC 27001:2022

• A.8.20 — Networks security belongs_to ISO/IEC 27001:2022

• A.8.2 — Privileged access rights belongs_to ISO/IEC 27001:2022

• A.8.10 — Information deletion belongs_to ISO/IEC 27001:2022

• A.8.12 — Data leakage prevention belongs_to ISO/IEC 27001:2022

• A.5.37 — Documented operating procedures belongs_to ISO/IEC 27001:2022

• A.8.14 — Redundancy of information processing facilities belongs_to ISO/IEC 27001:2022

• A.7.11 — Supporting utilities belongs_to ISO/IEC 27001:2022

• A.8.8 — Management of technical vulnerabilities belongs_to ISO/IEC 27001:2022

• A.5.6 — Contact with special interest groups belongs_to ISO/IEC 27001:2022

• A.8.28 — Secure coding belongs_to ISO/IEC 27001:2022

• A.5.1 — Policies for information security belongs_to ISO/IEC 27001:2022

• A.5.34 — Privacy and protection of personal identifiable information (PII) belongs_to ISO/IEC 27001:2022

• A.5.19 — Information security in supplier relationships belongs_to ISO/IEC 27001:2022

• A.7.5 — Protecting against physical and environmental threats belongs_to ISO/IEC 27001:2022

• A.8.5 — Secure authentication belongs_to ISO/IEC 27001:2022

• A.8.3 — Information access restriction belongs_to ISO/IEC 27001:2022

• A.8.24 — Use of cryptography belongs_to ISO/IEC 27001:2022

• A.8.30 — Outsourced development belongs_to ISO/IEC 27001:2022

• A.5.14 — Information transfer belongs_to ISO/IEC 27001:2022

• A.5.31 — Legal, statutory, regulatory and contractual requirements belongs_to ISO/IEC 27001:2022

• A.6.1 — Screening belongs_to ISO/IEC 27001:2022

• A.7.10 — Storage media belongs_to ISO/IEC 27001:2022

• A.8.19 — Installation of software on operational systems belongs_to ISO/IEC 27001:2022

• A.5.7 — Threat intelligence belongs_to ISO/IEC 27001:2022

• A.5.8 — Information security in project management belongs_to ISO/IEC 27001:2022

• A.5.13 — Labelling of information belongs_to ISO/IEC 27001:2022

• A.5.11 — Return of assets belongs_to ISO/IEC 27001:2022

• A.5.10 — Acceptable use of information and other associated assets belongs_to ISO/IEC 27001:2022

• A.5.33 — Protection of records belongs_to ISO/IEC 27001:2022

• A.5.15 — Access control belongs_to ISO/IEC 27001:2022

• A.6.2 — Terms and conditions of employment belongs_to ISO/IEC 27001:2022

• A.5.17 — Authentication information belongs_to ISO/IEC 27001:2022

• A.5.30 — ICT readiness for business continuity belongs_to ISO/IEC 27001:2022

• A.7.12 — Cabling security belongs_to ISO/IEC 27001:2022

• A.8.16 — Monitoring activities belongs_to ISO/IEC 27001:2022

• A.7.8 — Equipment siting and protection belongs_to ISO/IEC 27001:2022

• A.5.4 — Management responsibilities belongs_to ISO/IEC 27001:2022

• A.7.6 — Working in secure areas belongs_to ISO/IEC 27001:2022

• A.6.4 — Disciplinary process belongs_to ISO/IEC 27001:2022

• A.7.2 — Physical entry belongs_to ISO/IEC 27001:2022

• A.8.21 — Security of network services belongs_to ISO/IEC 27001:2022

• A.5.22 — Monitoring, review and change management of supplier services belongs_to ISO/IEC 27001:2022

• A.6.3 — Information security awareness, education and training belongs_to ISO/IEC 27001:2022

• A.5.32 — Intellectual property rights belongs_to ISO/IEC 27001:2022

• A.7.9 — Security of assets off-premises belongs_to ISO/IEC 27001:2022

• A.5.2 — Information security roles and responsibilities belongs_to ISO/IEC 27001:2022

• A.8.15 — Logging belongs_to ISO/IEC 27001:2022

• A.8.23 — Web filtering belongs_to ISO/IEC 27001:2022

• A.5.26 — Response to information security incidents belongs_to ISO/IEC 27001:2022

• A.8.11 — Data masking belongs_to ISO/IEC 27001:2022

• A.8.9 — Configuration management belongs_to ISO/IEC 27001:2022

• A.5.5 — Contact with authorities belongs_to ISO/IEC 27001:2022

• A.5.36 — Compliance with policies, rules and standards for information security belongs_to ISO/IEC 27001:2022

• A.7.4 — Physical security monitoring belongs_to ISO/IEC 27001:2022

• A.8.1 — User endpoint devices belongs_to ISO/IEC 27001:2022

• A.8.4 — Access to source code belongs_to ISO/IEC 27001:2022

• A.8.6 — Capacity management belongs_to ISO/IEC 27001:2022

• A.5.28 — Collection of evidence belongs_to ISO/IEC 27001:2022

• A.5.3 — Segregation of duties belongs_to ISO/IEC 27001:2022

• A.8.18 — Use of privileged utility programs belongs_to ISO/IEC 27001:2022

• A.5.20 — Addressing information security within supplier agreements belongs_to ISO/IEC 27001:2022

• A.5.25 — Assessment and decision on information security events belongs_to ISO/IEC 27001:2022

• A.5.12 — Classification of information belongs_to ISO/IEC 27001:2022

• A.8.13 — Information backup belongs_to ISO/IEC 27001:2022

• A.6.5 — Responsibilities after termination or change of employment belongs_to ISO/IEC 27001:2022

• A.8.31 — Separation of development, test and production environments belongs_to ISO/IEC 27001:2022

• A.8.25 — Secure development life cycle belongs_to ISO/IEC 27001:2022

• A.6.7 — Remote working belongs_to ISO/IEC 27001:2022

• A.5.16 — Identity management belongs_to ISO/IEC 27001:2022

• A.5.29 — Information security during disruption belongs_to ISO/IEC 27001:2022

• A.6.8 — Information security event reporting belongs_to ISO/IEC 27001:2022

• A.8.22 — Segregation of networks belongs_to ISO/IEC 27001:2022