ISO 27001:2013
What is ISO 27001:2013?
Information technology, security techniques, information security management systems, requirements: the second edition (2013-10-01), superseded by ISO/IEC 27001:2022. The transition period for certificates to this edition ended on 31 October 2025; it is kept for lineage and for the 2013 to 2022 edition crosswalks. It comprises 140 controls organised across 21 domains, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where ISO 27001:2013 overlaps with the standards you already hold
What ISO 27001:2013 means in your sector
What ISO 27001:2013 means for your job
Questions people ask about ISO 27001:2013
What is ISO 27001:2013?
How many controls does ISO 27001:2013 have?
Where does ISO 27001:2013 apply?
Which version of ISO 27001:2013 is covered here?
Query ISO 27001:2013 programmatically
ISO 27001:2013, its 140 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO 27001:2013 API reference and MCP config →How ready are you for ISO 27001:2013?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.