ISO 27002 is the international standard providing guidelines for the selection, implementation and management of information security controls.
ISO/IEC 27002:2022 is an implementation guide for controls referenced in ISO 27001 Annex A. The 2022 version reorganized controls from 114 (in 14 domains) to 93 controls in 4 categories: organizational, people, physical and technological. Each control includes attributes such as type, security property and cybersecurity concept.
No. ISO 27002 is a best practices guide. Certification is obtained against ISO 27001, which references ISO 27002 controls in its Annex A.
Reduced from 114 to 93 controls, reorganized from 14 domains to 4 categories, added 11 new controls and introduced an attribute system for classifying each control.
Need an assessment in this area?