ISO 27001 Annex A Controls

ISO 27001 Annex A 8.34 Protection of Information Systems During Audit Testing

ISO 27001 Annex A 8.33 Test Information

ISO 27001 Annex A 8.32 Change Management

ISO 27001 Annex A 8.31 Separation of Development, Test and Production Environments

ISO 27001 Annex A 8.30 Outsourced Development

ISO 27001 Annex A 8.29 Security Testing in Development and Acceptance

ISO 27001 Annex A 8.28 Secure Coding

ISO 27001 Annex A 8.27 Secure Systems Architecture and Engineering Principles

ISO 27001 Annex A 8.26 Application security requirements

ISO 27001 Annex A 8.25 Secure Development Life Cycle

ISO 27001 Annex A 8.24 Use of Cryptography

ISO 27001 Annex A 8.23 Web Filtering

ISO 27001 Annex A 8.22 Segregation of Networks

ISO 27001 Annex A 8.21 Security of Network Services

ISO 27001 Annex A 8.20 Networks Security

ISO 27001 Annex A 8.19 Installation of Software on Operational Systems

ISO 27001 Annex A 8.18 Use of Privileged Utility Programs

ISO 27001 Annex A 8.17 Clock Synchronisation

ISO 27001 Annex A 8.16 Monitoring Activities

ISO 27001 Annex A 8.15 Logging

ISO 27001 Annex A 8.14 Redundancy of Information Processing Facilities

ISO 27001 Annex A 8.13 Information Backup

ISO 27001 Annex A Controls List

ISO 27001 Annex A 8.12 Data Leakage Prevention

ISO 27001 Annex A 8.11 Data Masking

ISO 27001 Annex A 8.10 Information Deletion

ISO 27001 Annex A 8.9 Configuration Management

ISO 27001 Annex A 8.8 Management of Technical Vulnerabilities

ISO 27001 Annex A 8.7 Protection Against Malware

ISO 27001 Annex A 8.6 Capacity Management

ISO 27001 Annex A 8.5 Secure Authentication

ISO 27001 Annex A 8.4 Access to Source Code

ISO 27001 Annex A 8.3 Information Access Restriction

ISO 27001 Annex A 8.2 Privileged Access Rights

ISO 27001 Annex A 8.1 User Endpoint Devices

ISO 27001 Annex A 7.14 Secure Disposal or Re-use of Equipment

ISO 27001 Annex A 7.13 Equipment Maintenance

ISO 27001 Annex A 7.12 Cabling Security

ISO 27001 Annex A 7.11 Supporting Utilities

ISO 27001 Annex A 7.10 Storage Media

ISO 27001 Annex A 7.9 Security of Assets Off-Premises

ISO 27001 Annex A 7.8 Equipment Siting and Protection

ISO 27001 Annex A 7.6 Working in Secure Areas

ISO 27001 Annex A 7.7 Clear Desk and Clear Screen

ISO 27001 Annex A 7.5 Protecting Against Physical and Environmental Threats

ISO 27001 Annex A 7.4 Physical Security Monitoring

ISO 27001 Annex A 7.3 Securing Offices, Rooms and Facilities

ISO 27001 Annex A 7.2 Physical Entry

ISO 27001 Annex A 7.1 Physical Security Perimeters

ISO 27001 Annex A 6.8 Information Security Event Reporting

ISO 27001 Annex A 6.7 Remote Working

ISO 27001 Annex A 6.6 Confidentiality or Non-disclosure Agreements

ISO 27001 Annex A 6.5 Responsibilities After Termination or Change of Employment

ISO 27001 Annex A 6.4 Disciplinary Process

ISO 27001 Annex A 6.3 Information Security Awareness

ISO 27001 Annex A 6.2 Terms of Employment

ISO 27001 Annex A 6.1 Screening

ISO 27001 Annex A 5.37 Documented Operating Procedures

ISO 27001 Annex A 5.36 Compliance with Policies, Rules, and Standards

ISO 27001 Annex A 5.35 Independent Review of Information Security

ISO 27001 Annex A 5.34 Privacy and Protection of PII

ISO 27001 Annex A 5.33 Protection of Records

ISO 27001 Annex A 5.32 Intellectual Property Rights

ISO 27001 Annex A 5.31 Legal, Statutory, Regulatory and Contractual Requirements

ISO 27001 Annex A 5.30 ICT Readiness for Business Continuity

ISO 27001 Annex A 5.29 Information Security During Disruption

ISO 27001 Annex A 5.28 Collection of Evidence

ISO 27001 Annex A 5.27 Learning From Information Security Incidents

ISO 27001 Annex A 5.26 Response to Information Security Incidents

ISO 27001 Annex A 5.25 Assessment and Decision on Information Security Events

ISO 27001 Annex A 5.24 Information Security Incident Management Planning and Preparation

ISO 27001 Annex A 5.23 Information Security for Use of Cloud Services

ISO 27001 Annex A 5.22 Monitoring, Review and Change Management of Supplier Services

ISO 27001 Annex A 5.21 Managing Information Security in the ICT Supply Chain

ISO 27001 Annex A 5.20 Addressing Information Security Within Supplier Agreements

ISO 27001 Annex A 5.19 Information Security in Supplier Relationships

ISO 27001 Annex A 5.18 Access Rights

ISO 27001 Annex A 5.17 Authentication Information

ISO 27001 Annex A 5.16 Identity Management

ISO 27001 Annex A 5.15 Access Control

ISO 27001 Annex A Controls: The Complete 2022 Reference List (93 Controls)

ISO 27001 Annex A 5.14 Information Transfer

ISO 27001 Annex A 5.13 Information Labelling

ISO 27001 Annex A 5.12 Classification of Information

ISO 27001 Annex A 5.11 Return of Assets

ISO 27001 Annex A 5.10 Acceptable Use of Information and Other Associated Assets

ISO 27001 Annex A 5.9 Inventory of Information and Other Associated Assets

ISO 27001 Annex A 5.8 Information Security in Project Management

ISO 27001 Annex A 5.7 Threat Intelligence

ISO 27001 Annex A 5.6 Contact with Special Interest Groups

ISO 27001 Annex A 5.5 Contact with Authorities

ISO 27001 Annex A 5.4 Management Responsibilities

ISO 27001 Annex A 5.3 Segregation of Duties

ISO 27001 Annex A 5.2 Information Security Roles and Responsibilities

ISO 27001 Annex A 5.1 Policies for Information Security

The complete guide to ISO/IEC 27002:2022