Preventive
The list of ISO 27001 Preventive Controls.
Preventive is an ISO 27001 Control Type.
The Control Type is an attribute that allows us to view controls from the perspective of when and how the control modifies a risk in relation to the timing of the occurrence of an information security incident.
ISO 27001 Annex A 8.34 Protection of Information Systems During Audit Testing
ISO 27001 Annex A 8.33 Test Information
ISO 27001 Annex A 8.32 Change Management
ISO 27001 Annex A 8.31 Separation of Development, Test and Production Environments
ISO 27001 Annex A 8.30 Outsourced Development
ISO 27001 Annex A 8.29 – Security Testing in Development and Acceptance
ISO 27001 Annex A 8.28 Secure Coding
ISO 27001 Annex A 8.27 Secure Systems Architecture and Engineering Principles
ISO 27001 Annex A 8.26 Application Security Requirements
ISO 27001 Annex A 8.25 Secure Development Life Cycle
ISO 27001 Annex A 8.24 Use of Cryptography
ISO 27001 Annex A 8.23 Web Filtering
ISO 27001 Annex A 8.22 Segregation of Networks
ISO 27001 Annex A 8.21 Security of Network Services
ISO 27001 Annex A 8.20 Network Security
ISO 27001 Annex A 8.19 Installation of Software on Operational Systems
ISO 27001 Annex A 8.18 Use of Privileged Utility Programs
ISO 27001 Annex A 8.14 Redundancy of information processing facilities
ISO 27001 Annex A 8.12 Data Leakage Prevention
ISO 27001 Annex A 8.11 Data Masking
ISO 27001 Annex A 8.10 Information Deletion
ISO 27001 Annex A 8.9 Configuration Management
ISO 27001 Annex A 8.8 Management of Technical Vulnerabilities
ISO 27001 Annex A 8.7 Protection Against Malware
ISO 27001 Annex A 8.6 Capacity Management
ISO 27001 Annex A 8.5 Secure Authentication
ISO 27001 Annex A 8.4 Access To Source Code
ISO 27001 Annex A 8.3 Information Access Restriction
ISO 27001 Annex A 8.2 Privileged Access Rights
ISO 27001 Annex A 8.1 User Endpoint Devices
ISO 27001 Annex A 7.14 Secure Disposal Or Re-Use Of Equipment
ISO 27001 Annex A 7.13 Equipment Maintenance
ISO 27001 Annex A 7.12 Cabling Security
ISO 27001 Annex A 7.11 Supporting Utilities
ISO 27001 Annex A 7.10 Storage Media
ISO 27001 Security Of Assets Off-Premises: Annex A 7.9
ISO 27001 Annex A 7.8 Equipment Siting And Protection
ISO 27001 Annex A 7.6 Working In Secure Areas
ISO 27001 Annex A 7.7 Clear Desk And Clear Screen
ISO 27001 Annex A 7.5 Protecting Against Physical and Environmental Threats
ISO 27001 Annex A 7.4 Physical Security Monitoring
ISO 27001 Securing Offices, Rooms And Facilities: Annex A 7.3
ISO 27001 Physical Entry: Annex A 7.2
ISO 27001 Physical Security Perimeters: Annex A 7.1
ISO 27001 Remote Working: Annex A 6.7
ISO 27001 Confidentiality Or Non-Disclosure Agreements: Annex A 6.6
ISO 27001 Responsibilities After Termination Or Change Of Employment: Annex A 6.5
ISO 27001 Disciplinary Process: Annex A 6.4
ISO 27001 Information Security Awareness Education and Training: Annex A 6.3
ISO 27001 Terms and Conditions of Employment: Annex A 6.2
ISO 27001 Screening: Annex A 6.1
ISO 27001 Annex A 5.37 Documented Operating Procedures
ISO 27001 Annex A 5.36 Compliance With Policies, Rules And Standards For Information Security
ISO 27001 Annex A 5.35 Independent Review Of Information Security
ISO 27001 Annex A 5.34 Privacy And Protection Of PII
ISO 27001 Annex A 5.33 Protection Of Records
ISO 27001 Annex A 5.32 Intellectual Property Rights
ISO 27001 Annex A 5.31 Legal, statutory, regulatory and contractual requirements
ISO 27001 Annex A 5.29 Information Security During Disruption
ISO 27001 Annex A 5.27 Learning From Information Security Incidents
ISO 27001 Annex A 5.23 Information Security For Use Of Cloud Services
ISO 27001 Annex A 5.22 Monitor, Review And Change Management Of Supplier Services
ISO 27001 Annex A 5.21 Managing Information Security In The ICT Supply Chain
ISO 27001 Annex A 5.20 Addressing Information Security Within Supplier Agreements
ISO 27001 Annex A 5.19 Information Security In Supplier Relationships
ISO 27001 Annex A 5.18 Access Rights
ISO 27001 Annex A 5.17 Authentication Information
ISO 27001 Annex A 5.16 Identity Management
ISO 27001 Annex A 5.15 Access Control
ISO 27001 Annex A 5.14 Information Transfer
ISO 27001 Annex A 5.13 Labelling Of Information
ISO 27001 Annex A 5.12 Classification Of Information
ISO 27001 Annex A 5.11 Return Of Assets
ISO 27001 Annex A 5.10 Acceptable Use Of Information And Other Associated Assets
ISO 27001 Annex A 5.9 Inventory Of Information And Other Associated Assets
ISO 27001 Annex A 5.8 Information Security In Project Management
ISO 27001 Annex A 5.7 Threat Intelligence
ISO 27001 Annex A 5.6 Contact With Special Interest Groups
ISO 27001 Annex A 5.5 Contact With Authorities
ISO 27001 Annex A 5.4 Management Responsibilities
ISO 27001 Annex A 5.3 Segregation of Duties
ISO 27001 Annex A 5.2 Roles and Responsibilities
