Skip to content

Annex A

The section of ISO 27001 that contains the reference set of information security controls. The 2022 revision organises 93 controls into four themes: Organisational, People, Physical, and Technological.

Information Security

Related Terms

Related Frameworks

Frequently Asked Questions

What is Annex A?
The section of ISO 27001 that contains the reference set of information security controls. The 2022 revision organises 93 controls into four themes: Organisational, People, Physical, and Technological.
Why is Annex A important for compliance?
Annex A is a key concept in Information Security. Understanding annex a helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform covers this concept across 692 frameworks with 819,000+ control mappings.
What concepts are related to Annex A?
Key concepts related to Annex A include ISO 27001. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Where can I learn more about Annex A?
Explore our compliance framework pages to see how annex a applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 692 frameworks.

See how Annex A applies across compliance frameworks

Our AI-powered platform maps 692 frameworks with 819,000+ control connections. Explore how this concept is addressed across standards.