ISO/IEC 27001:2022
The certifiable standard for an information security management system (ISMS).
International · ISO/IECWho it applies to
Any organisation that wants a systematic, auditable security programme.
Key areas
- Risk assessment and treatment
- Statement of Applicability
- 93 Annex A controls in four themes: organisational, people, physical and technological
- Internal audit and management review
How Nigehban helps
- Gap assessment against the requirements
- Remediation roadmap and implementation support
- Independent audit and evidence review
- Monitoring that proves controls keep working
Related standards
ISO/IEC 27002:2022
Practical guidance for implementing the controls listed in ISO/IEC 27001 Annex A.
InternationalISO/IEC 27005:2022
Guidance on managing information security risk within an ISMS.
InternationalISO/IEC 27017
Security controls for cloud services, for both providers and customers.
International