Discover the new and merged controls in ISO 27001:2022

In today's networked business world, protecting information and sensitive data is not just a duty but a necessity. With the new ISO/IEC 27001:2022 and the revised, up-to-date information security measures (controls) in Annex A, you can ensure that your organization is optimally protected against modern threats. Our free PDF provides a detailed overview of the revised ISO 27001 controls.

 

What makes our White Paper so valuable
  • Comprehensive information: Learn all about the 11 new and 24 merged controls in ISO 27001.
  • Efficient implementation: Use the detailed description of the new controls and the practical tips for your daily work.
  • Helpful comparison: Understand which measures from the old version have been merged to adapt them to the current information security environment.

 

 

Background

The internationally valid ISO/IEC 27001 standard supports organizations in implementing robust information security management systems. To this end, it defines an up-to-date, comprehensive catalog of proven information security measures (controls) in Annex A. In view of the advancing digitalization and the dynamic threat landscape, the standard was comprehensively revised in 2022. The revised normative Annex A is of particular interest to companies.

Compared to the old version, the number of controls has been reduced from 114 in 14 sections to 93 in 4 sections, although 11 new ISO 27001 controls have been added. The compression is due to the combination of 24 "merged controls" from several measures of the previous edition.

 

Cover sheet for white paper ISO 27001 Annex A new controls with PDF

Benefit from the know-how of our experts

Use our free White Paper "ISO/IEC 27001 Annex A" as a tool and helpful support. Learn about the amended ISO 27001 controls and implement them successfully.

Enter your details in the form opposite and receive immediate, free access to valuable information.

jegelka-markus-dqs-experte-informationssicherheit
Loading...

About the author

Markus Jegelka

DQS expert for information security management systems (ISMS) and long-time auditor for the standards ISO 9001, ISO/IEC 27001 and IT security catalog according to para 11.1a/b of the German Energy Industry Act (EnWG) with test procedure competence for § 8a (3) BSIG