ISO/IEC 27002:2022

Name
ISO/IEC 27002:2022
Publisher
ISO/IEC
Type
Security standard
What it is

Guidance on implementing information security controls, aligned with ISO/IEC 27001 Annex A.

Key points
  • Implementation guidance for each Annex A control
  • Organized into organizational, people, physical and technological controls
  • Uses attributes to filter controls
On the exam

It is guidance and is not certifiable.

More from Standards & Frameworks