Skip to content
Information SecurityInternational

ISO/IEC 27013:2021

What is ISO/IEC 27013:2021?

ISO/IEC's guidance on running ISO/IEC 27001 and ISO/IEC 20000-1 as one integrated management system, updated by Amendment 1 to ISO/IEC 27001:2022: aligning scopes, choosing the implementation path, keeping traceability to both standards, resolving where the two diverge on controls, assets, risk, incidents and change, and using service reporting, suppliers, capacity, continuity and release management to strengthen security. It comprises 23 controls organised across 3 domains, and applies in International.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where ISO/IEC 27013:2021 overlaps with the standards you already hold

What ISO/IEC 27013:2021 means in your sector

What ISO/IEC 27013:2021 means for your job

Questions people ask about ISO/IEC 27013:2021

What is ISO/IEC 27013:2021?
ISO/IEC's guidance on running ISO/IEC 27001 and ISO/IEC 20000-1 as one integrated management system, updated by Amendment 1 to ISO/IEC 27001:2022: aligning scopes, choosing the implementation path, keeping traceability to both standards, resolving where the two diverge on controls, assets, risk, incidents and change, and using service reporting, suppliers, capacity, continuity and release management to strengthen security.
How many controls does ISO/IEC 27013:2021 have?
ISO/IEC 27013:2021 contains 23 controls organized across 3 domains.
Where does ISO/IEC 27013:2021 apply?
ISO/IEC 27013:2021 applies in International. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of ISO/IEC 27013:2021 is covered here?
This page covers ISO/IEC 27013:2021 (third edition 2021-11) incorporating Amd 1:2024.

Query ISO/IEC 27013:2021 programmatically

ISO/IEC 27013:2021, its 23 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

ISO/IEC 27013:2021 API reference and MCP config →

How ready are you for ISO/IEC 27013:2021?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .