ISO/IEC 27002:2022 Update

ISO/IEC 27002:2022 Information Security, cybersecurity and privacy protection – Information security controls New version of ISO/IEC 27002, known as the guidelines to ISO/IEC 27001 requirements of information security management system, is released today to replace the current 2013 version. The new version will provide reference to security controls on Information Security, Cybersecurity, and Privacy Protection. The new version of ISO/IEC 27001 is expected to align with the structure of controls in ISO/IEC 27002:2022. The number of controls is changed to 93 controls of ISO/IEC 27002:2022 from 114 controls of ISO/IEC 27002:2013. The controls are grouped into 4 categories in the new version instead of 14 clauses in the current version. The controls are: 1. Organizational controls 2. People controls 3. Physical controls 4. Technological controls