ISO 27001 Attributes Explained
ISO 27001 Attributes Introduced in the 2022 update to the standard, in this ultimate guide to ISO 27001 Attributes you […]
ISO 27001 Attributes Explained Read More »
The list of ISO 27001 Identify Controls.
Identify is an ISO 27001 Cybersecurity Concept.
Cybersecurity Concept is an attribute that allows us to view controls from the perspective of how the control links to the cybersecurity concepts defined in the cybersecurity framework described in ISO/IEC TS 27110.
ISO 27001 Attributes Introduced in the 2022 update to the standard, in this ultimate guide to ISO 27001 Attributes you […]
ISO 27001 Attributes Explained Read More »
ISO 27001 Annex A 8.30 Outsourced Development is a security control that mandates strict supervision of third-party vendors to ensuring
ISO 27001:2022 Annex A 8.30 Outsourced development: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 8.29 is a security control that mandates the definition and implementation of security testing processes within
ISO 27001 Annex A 8.8 is a security control that mandates the effective management of technical vulnerabilities within an organization’s
ISO 27001 Annex A 8.6 Capacity Management is a security control that ensures organizations monitor and adjust resource usage to
ISO 27001:2022 Annex A 8.6 Capacity Management: The Lead Auditor’s Guide. Read More »
ISO 27001 Annex A 5.36 Compliance with Policies, Rules and Standards is a security control that mandates regular managerial reviews
ISO 27001 Annex A 5.35 Independent Review of Information Security is a security control that mandates the objective evaluation of
ISO 27001 Annex A 5.34 Privacy and Protection of PII is a security control that mandates the identification and fulfillment
ISO 27001 Annex A 5.33 is a security control that mandates the protection of records against loss, destruction, and falsification
ISO 27001 Annex A 5.32 Intellectual Property Rights is a security control that mandates the strict management of software licenses
ISO 27001 Annex A 5.31 Legal, Statutory, Regulatory and Contractual Requirements is a security control that mandates the systematic identification
ISO 27001 Annex A 5.27 Learning from Information Security Incidents is a security control that mandates the systematic analysis of
ISO 27001 Annex A 5.22 Monitor, Review and Change Management of Supplier Services is a security control that mandates the
ISO 27001 Annex A 5.21 Managing information security in the ICT supply chain is a security control that requires organisations
ISO 27001 Annex A 5.20 is a security control that requires organisations to establish and formalise security requirements within legal
ISO 27001 Annex A 5.19 is a security control that mandates the establishment of processes and procedures to manage risks
Beginner’s Guide to ISO27001:2022 Annex A 5.12 / ISO27002:2022 Clause 5.12 Classification of Information
A Beginner’s Guide to ISO 27001 Annex A 5.9 Inventory of Information and Other Associated Assets
A Beginner’s Guide to ISO27001:2022 Annex A 5.8 / ISO27002:2022 Clause 5.8 Information security in project management
Beginner’s Guide to the new ISO 27001 control – ISO 27001 Annex A 5.7 / ISO 27002: 2022 Clause 5.7 Threat Intelligence
Beginner’s Guide to ISO 27001 Annex A 5.5 / ISO 27002: 2022 Clause 5.5 Contact with Authorities
ISO 27001 Annex A 5.4 Management Responsibilities is a security control that requires senior leadership to mandate information security policy
Beginner’s Guide to ISO27001 Annex A 5.2 / ISO27002: 2022 Clause 5.2 Information Security Roles and Responsibilities