The new ISO/IEC 27001:2022 is released.

As we previously mentioned, one of the major significant revisions to the ISO/IEC 27001 is the amendment of Annex A. The first obvious change is in the title of the standard “Information security, cybersecurity and privacy protection — Information security management systems”. The others are minor modifications to the requirements. 
 
The new version of the ISO/IEC 27001 
 
ISO standards try to go for a review cycle every 5 years. The internationally recognized ISO/IEC 27001 standard went through deep changes in the controls and some minor elements of the 4 to 10 we are happy to share with you:   
 
– Section 4: mostly wording changes 
– Section 5: no changes 
– Section 6: some changes around objectives must be taken into consideration 
– Section 7: simplification 
– Section 8: mostly rewording 
– Section 9: reorganization of the section and particularly of the internal audit part 
– Section 10: reorganization of the section 
 
If you wish to view all the specifics of the modifications, we have produced a detailed document that we will be happy to share with you.