ISO 27799
What is ISO 27799?
Information security management in health using ISO 27002. It comprises 46 controls organised across 18 domains, published by ISO/IEC, and applies in International.
How ISO 27799 maps to other frameworks
All 46 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 18 domains ISO 27799 groups its controls into
Frameworks that share controls with ISO 27799
Each of these has at least one control mapped to a control in ISO 27799. The number is how many ISO 27799 controls are shared, counted from the mapping graph.
NIST SP 800-66
12 shared controlsMDS2 (Medical Device)
12 shared controlsMARS-E
12 shared controlsNIST Privacy Framework
11 shared controlsOman National Cybersecurity Framework
10 shared controlsFTC GLBA Safeguards Rule (16 CFR Part 314)
10 shared controlsTISAX - Trusted Information Security Assessment Exchange
10 shared controlsVirginia CDPA
9 shared controlsWhere ISO 27799 overlaps with the standards you already hold
Where to get trained on ISO 27799
4 courses in the catalogue cover ISO 27799 directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
What ISO 27799 means in your sector
What ISO 27799 means for your job
Questions people ask about ISO 27799
What is ISO 27799?
How many controls does ISO 27799 have?
Where does ISO 27799 apply?
What frameworks does ISO 27799 map to?
How do I get started with ISO 27799 compliance?
Query ISO 27799 programmatically
ISO 27799, its 46 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO 27799 API reference and MCP config →How ready are you for ISO 27799?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.