Ensuring Compliance with ISO 27001 (ISO 27001:2013 A.18 → 2022 Mapping)
Understand ISO 27001 compliance controls: legal, IP, records, privacy and security reviews (2013 A.18), and where each now sits in ISO 27001:2022.
0 Comments
February 11, 2023
Information Security Aspects of Business Continuity Management (ISO 27001:2013 A.17 → 2022 Mapping)
Information security in business continuity management under ISO 27001: continuity planning, redundancy, and the 2022 controls 5.29, 5.30 and 8.14.
February 11, 2023
Ensuring Information Security with Effective Incident Management (ISO 27001:2013 A.16 → 2022 Mapping)
Updated for ISO/IEC 27001:2022 (23 October 2026). This article explains Annex A.16 "Information security incident management" of the 2013 edition. ISO/IEC 27001:2022 has replaced it: certification to the 2013 edition…
February 11, 2023
Securing Supplier Relationships in ISO 27001 (ISO 27001:2013 A.15 → 2022 Mapping)
How ISO 27001 secures supplier relationships: policies, agreements, ICT supply chain and monitoring (2013 A.15), mapped to ISO 27001:2022 controls.
February 11, 2023
System acquisition, development, and maintenance (ISO 27001:2013 A.14 → 2022 Mapping)
ISO 27001 system acquisition, development and maintenance explained: security requirements, secure SDLC and testing (A.14), with the 2022 control mapping.
February 11, 2023
Understanding Communications Security in ISO 27001 (ISO 27001:2013 A.13 → 2022 Mapping)
ISO 27001 communications security explained: network controls, segregation and information transfer (2013 A.13), and their ISO 27001:2022 equivalents.
February 11, 2023
Ensuring Information Security via ISO 27001 Operations Security (ISO 27001:2013 A.12 → 2022 Mapping)
ISO 27001 operations security explained: procedures, malware, backup, logging and vulnerability management (A.12), mapped to the 2022 Annex A controls.
February 11, 2023
In-Depth Guide to ISO 27001’s Physical & Environmental Security (ISO 27001:2013 A.11 → 2022 Mapping)
ISO 27001 physical and environmental security: secure areas, entry controls and equipment protection (2013 A.11), mapped to ISO 27001:2022 controls.
February 11, 2023
Cryptography in ISO 27001 Guide (ISO 27001:2013 A.10 → 2022 Mapping)
ISO 27001 cryptography controls explained: encryption policy and key management (2013 A.10), now control 8.24 Use of cryptography in ISO 27001:2022.
February 11, 2023
Access Control in Information Security Management (ISO 27001:2013 A.9 → 2022 Mapping)
Updated for ISO/IEC 27001:2022 (23 October 2026). This article explains Annex A.9 "Access control" of the 2013 edition. ISO/IEC 27001:2022 has replaced it: certification to the 2013 edition ended on…
February 11, 2023