Management systems · ISO · Technical definition

Annex A.

Definition

Normative list of controls accompanying ISO/IEC 27001. The 2022 version contains 93 controls grouped into four categories. The organisation must justify the inclusion or exclusion of each control in its statement of applicability (SoA).

Nature

Normative definition

Source

ISO/IEC 27001:2022 · Information security management systems

Cite or embed this term

Insert the definition on your site (it stays linked to the source and updates automatically), or use the glossary's open data.

Open data (JSON) →
More terms from Management systems · ISO

ISO 9001

International standard for quality management systems. Defines the requirements for an organisa…

ISO/IEC 27001

International standard specifying requirements for information security management systems (ISMS). The…

ISO/IEC 27701

Privacy information management system (PIMS) standard. In its ISO/IEC 27701:2025 edition, it is…

ISO/IEC 42001

First international standard for artificial intelligence management systems (AI Management Syste…

ISO 37001

International standard for anti-bribery management systems. The current edition, ISO 37001:2025, applies to…
Next

Apply this definition.

Define the term, see how I use it in the archive and, if you still have a question, write to me.

Define Full glossary Return to the index of technical concepts. Explore further Technical reports See the concept applied with sources. Discuss Write to me Send me a question or a specific case.
WhatsApp G-CERTI