Skip to content

ISO 27001

What is ISO 27001?

The international standard for information security management systems (ISMS). The 2022 revision (ISO/IEC 27001:2022) includes 93 controls in Annex A, restructured into four themes.

Information Security

Related terms

ISMS (Information Security Management System)Annex AISO 27002

Frameworks that govern iso 27001

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on iso 27001

Requirements naming iso 27001 across 6 standards, quoted from the control text.

HKMA TM-G-14 controls

HKMA TM-G-1 coordination + 2024-2025 pipeline. COORDINATION WITH HKMA FRAMEWORKS: (a) HKMA SPM UMBRELLA (separately referenced) - TM-G-1 is one of 60+ SPM modules; SPM provides overall framework + supervisory expectations;

HKMA-TMG1-Coord-SPM-CRAF-Basel-FSB-2024-2025-Pipeline · TM-G-1 Coordination with HKMA SPM, C-RAF v2.0, Basel III, FSB, ISO 27001, NIST CSF and 2024-2025 Pipeline →
Kuwait National Cybersecurity Framework4 controls

Kuwait National Cybersecurity Framework (NCF) Govern function. Issued and maintained by Kuwait National Cybersecurity Centre (NCSC) under Council of Ministers Resolution.

KNCF-Govern-Strategy-Policy-NCSC-NIST-CSF-2-0-ISO-27001-Council-of-Ministers-Compliance-Assurance · Kuwait NCF Govern + Strategy + Policy + NCSC + NIST CSF 2.0 + ISO 27001 + Compliance Assurance →
ISMAP (Japan)2 controls

ISMAP Cloud Governance establishes the management framework for Cloud Service Providers operating under ISMAP. (1) Information Security Management System (ISMS): based on ISO/IEC 27001:2022 + JIS Q 27001 (Japanese Industrial Standard equivalent) + ISMS-AC Info...

ISMAP-CloudGovernance-ISMS-RiskAssessment-SharedResponsibility-Policy-RegulatoryCompliance-RolesResponsibilities · ISMAP Cloud Governance - ISMS per ISO 27001/JIS Q 27001 + Risk Assessment + Shared Responsibility Model + Cloud Security Policy + Regulatory Compliance + Roles and Responsibilities →
FTC Health Breach Notification Rule1 control

HBNR crosswalk to comprehensive security + privacy + health frameworks. NIST CSF 2.0 mapping: GOVERN (privacy officer + IR + records + TPSP) + IDENTIFY (PHR identifiable info inventory + 3rd-party SDK audit + affected individual identification) + PROTECT (encr...

HBNR-Crosswalk-NIST-CSF-ISO-HIPAA · Crosswalk to NIST CSF 2.0, NIST 800-66, ISO 27001/27701, SOC 2 and HIPAA →
MITRE D3FEND1 control

Integrate D3FEND with broader cybersecurity ecosystem and frameworks. ATT&CK-D3FEND bidirectional mappings - each D3FEND defensive technique is mapped to ATT&CK offensive techniques it counters + each ATT&CK offensive technique maps to D3FEND defensive techniq...

MITRE-D3FEND-Integration-Mapping-ATTACK-CWE-CVE-CAPEC-NIST-CSF-CIS-ISO-27001-STIX-OpenC2 · MITRE D3FEND Integration + Mapping + ATT&CK + CWE + CVE + CAPEC + NIST CSF + CIS + ISO 27001 + STIX + OpenC2 →
Canada ITSG-33 - IT Security Risk Management2 controls

The department specifies standardised security control objectives, mapped to the business needs for security, that guide the selection and tailoring of controls, drawing on the objectives in the TBS directive and sources such as ISO 27001 Annex A, and defines...

canada-itsg-33-it-security-risk-management::A1-4.2.6 · 4.2.6 Specify security control objectives →

Questions people ask about iso 27001

What is ISO 27001?
The international standard for information security management systems (ISMS). The 2022 revision (ISO/IEC 27001:2022) includes 93 controls in Annex A, restructured into four themes.
Why is ISO 27001 important for compliance?
ISO 27001 is a key concept in Information Security. Understanding iso 27001 helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
What concepts are related to ISO 27001?
Key concepts related to ISO 27001 include ISMS (Information Security Management System), Annex A, ISO 27002. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address ISO 27001?
ISO 27001 appears in the requirement text of HKMA TM-G-1, Kuwait National Cybersecurity Framework, ISMAP (Japan), FTC Health Breach Notification Rule, MITRE D3FEND. Across these standards we have identified 14 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about ISO 27001?
Explore our compliance framework pages to see how iso 27001 applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how ISO 27001 applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.