ISO/IEC 27001:2022

ISO/IEC 27001 controls in the People controls family.

• ISO/IEC 27001 6.8 — Information security event reporting
• ISO/IEC 27001 6.3 — Information security awareness, education and training
• ISO/IEC 27001 6.4 — Disciplinary process

ISO/IEC 27001 controls in the Organizational controls family.

• ISO/IEC 27001 5.1 — Policies for information security
• ISO/IEC 27001 5.2 — Information security roles and responsibilities

ISO/IEC 27001 controls in the Physical controls family.

• ISO/IEC 27001 7.3 — Securing offices, rooms and facilities
• ISO/IEC 27001 7.11 — Supporting utilities

ISO/IEC 27001 controls in the Technological controls family.

• ISO/IEC 27001 8.1 — User end point devices
• ISO/IEC 27001 8.2 — Privileged access rights

Plain-English overview of the framework.

• ISO/IEC 27001:2022 — overview