Information SecurityInternational
ISO 27001:2022
What is ISO 27001:2022?
International standard for establishing, implementing, maintaining and continually improving an information security management system (ISMS). It comprises 93 controls organised across 6 domains, published by ISO/IEC, and applies in International.
How ISO 27001:2022 maps to other frameworks
All 93 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 6 domains ISO 27001:2022 groups its controls into
Clause 0 - ISO 27001:2022
People controls - ISO 27001:2022
Organizational controls - ISO 27001:2022
Clause 9 - ISO 27001:2022
Physical controls - ISO 27001:2022
Frameworks that share controls with ISO 27001:2022
Each of these has at least one control mapped to a control in ISO 27001:2022. The number is how many ISO 27001:2022 controls are shared, counted from the mapping graph.
Where ISO 27001:2022 overlaps with the standards you already hold
ISO 27001:2022 vs AWS Well-Architected Security PillarView comparison →ISO 27001:2022 vs CSA CCM v4View comparison →ISO 27001:2022 vs HIPAA Security RuleView comparison →ISO 27001:2022 vs ISO 27002:2022View comparison →ISO 27001:2022 vs SOC 2View comparison →ISO 27001:2022 vs ISO 9001View comparison →
Implementation guides for frameworks that overlap ISO 27001:2022
Step-by-step implementation of ISO 27001:2022
More ISO 27001:2022 comparisons
ISO 27001:2022 vs NIST SP 800-53 Rev 5View comparison →ISO 27001:2022 vs FedRAMP ModerateView comparison →ISO 27001:2022 vs FedRAMP HighView comparison →ISO 27001:2022 vs NIST SP 800-53 Rev 5 MODERATEView comparison →ISO 27001:2022 vs C5 (Germany)View comparison →ISO 27001:2022 vs ISO 27701:2019View comparison →
Analysis of ISO 27001:2022
How to Execute Microsoft Defender for Cloud Security Center Integration with ISO 27001:2022 Annex A.8 Asset Management Controls for Multi-Tenant Cloud OperationsMulti-tenant cloud operations require systematic integration between Microsoft Defender for Cloud's asset discovery capabilities and ISO 27001:2022 Annex A.8 asset management controls. This technical guide provides detailed implementation procedures for automated asset inventory, classification, and monitoring across Azure multi-tenant environments.
How to Execute ISO 27001:2022 Annex A.18 Compliance Controls Integration with SOC 2 Type II CC1.3 Compliance Framework for Multi-Framework Audit PreparationISO 27001:2022 Annex A.18 compliance controls require integration with SOC 2 Type II CC1.3 compliance framework elements to establish comprehensive audit readiness for organizations maintaining multiple certifications. This integration approach streamlines evidence collection while ensuring both frameworks' compliance monitoring requirements are simultaneously satisfied.
How to Execute AWS Security Hub Findings Integration with ISO 27001:2022 Annex A.12 Operations Security Controls for Multi-Account Cloud GovernanceAWS Security Hub centralizes security findings across multiple AWS accounts while ISO 27001:2022 Annex A.12 provides operational security control requirements. Integrating Security Hub findings with ISO 27001 controls enables systematic security operations management and compliance evidence collection across complex cloud environments.
How to Execute Zero Trust Network Access Controls Integration with ISO 27001:2022 Annex A.13 Network Security Management for Hybrid Cloud InfrastructureOrganizations implementing Zero Trust Architecture need structured integration with ISO 27001:2022 network security controls to ensure comprehensive cloud infrastructure protection. This approach combines continuous verification principles with systematic control implementation for regulatory compliance.
Training that covers ISO 27001:2022
AI Engineering for Compliance AgentsProfessional
$249 USDAI Third-Party Risk Management AutomationProfessional
$249 USDAI-Powered Digital Evidence ManagementProfessional
$249 USDAutomated Compliance Monitoring with AI AgentsProfessional
$249 USDBuilding Compliance Chatbots and Virtual AdvisorsProfessional
$249 USDWhere to get trained on ISO 27001:2022
4 courses in the catalogue cover ISO 27001:2022 directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
What ISO 27001:2022 means in your sector
What ISO 27001:2022 means for your job
Questions people ask about ISO 27001:2022
What is ISO 27001:2022?
International standard for establishing, implementing, maintaining and continually improving an information security management system (ISMS).
How many controls does ISO 27001:2022 have?
ISO 27001:2022 contains 93 controls organized across 6 domains.
Where does ISO 27001:2022 apply?
ISO 27001:2022 is applicable in International. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does ISO 27001:2022 map to?
ISO 27001:2022 has control-to-control mappings with 79 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with ISO 27001:2022 compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query ISO 27001:2022 programmatically
ISO 27001:2022, its 93 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO 27001:2022 API reference and MCP config →What ISO 27001:2022 requires, control by control
Each page carries the requirement text for one ISO 27001:2022 control and what an assessor expects to see as evidence.
- 5-1 Policies for information security
- 5-10 Acceptable use of information and other associated assets
- 5-12 Classification of information
- 5-13 Labelling of information
- 5-14 Information transfer
- 5-15 Access control
- 5-17 Authentication information
- 5-18 Access rights
- 5-19 Information security in supplier relationships
- 5-2 Information security roles and responsibilities
How much of another standard ISO 27001:2022 already covers
Each crosswalk is judged control by control, and the mappings that were rejected are kept alongside the ones that held.
- ACSC Essential Eight to ISO 27001:2022 crosswalk
- ANSSI Guide d'hygiene informatique (42 mesures, v2.0) to ISO 27001:2022 crosswalk
- APRA CPS 230 Operational Risk Management to ISO 27001:2022 crosswalk
- APRA CPS 234 to ISO 27001:2022 crosswalk
- ASD Strategies to Mitigate Cyber Security Incidents to ISO 27001:2022 crosswalk
- Australia Consumer Data Right - Banking (CDR) to ISO 27001:2022 crosswalk
- Australia My Health Records Act 2012 to ISO 27001:2022 crosswalk
- AWS Well-Architected Security Pillar to ISO 27001:2022 crosswalk
How ready are you for ISO 27001:2022?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .