ISO 27001 compliance controls in the 2022 edition: legal and contract requirements, IP rights, records, privacy, independent reviews and checks.
ISO 27001 business continuity under the 2022 edition: security during disruption, ICT readiness, redundancy, RTO and RPO, testing and audit evidence.
Information security incident management under ISO 27001:2022: planning, event reporting, triage, response, lessons learned and evidence collection.
Manage ISO 27001 supplier relationships under the 2022 edition: supplier policy, contract clauses, ICT supply chain, monitoring and cloud services.
ISO 27001 secure development under the 2022 edition: security requirements, secure SDLC, architecture, secure coding, testing, outsourcing and test data.
ISO 27001 communications security under the 2022 edition: network security, network services, segregation, web filtering, information transfer and NDAs.
ISO 27001 operations security under the 2022 edition: procedures, change and capacity management, malware, backups, logging, patching and monitoring.
ISO 27001 physical security under the 2022 edition: perimeters, entry, monitoring, environmental threats, equipment, clear desk and secure disposal.
ISO 27001 cryptography under the 2022 edition: control 8.24, a cryptography policy, approved algorithms, key management and what auditors check.
ISO 27001 access control under the 2022 edition: access policy, identity management, passwords and MFA, access rights, privileged access and reviews.
