What is ANNEX A in ISo 27001

The video tutorial provides an overview of the ISO 27001 certification process, focusing on the selection and implementation of relevant controls from Annex A. It describes Annex A as a catalog of security controls to enhance ISMS. The tutorial highlights significant changes made to Annex A controls in 2020 and offers insights into the breakdown of these controls for better understanding during implementation or audits. Additionally, it introduces Annex B1 and B2, which serve as reference points with backward compatibility to the 2013 version, facilitating easy cross-referencing between the new and old standards.

What is the primary purpose of Annex A in ISO 27001 certification?

• To provide a list of security controls

• To offer financial guidelines

• To outline marketing strategies

• To define legal requirements

What was one of the major updates to Annex A in 2020?

• Addition of marketing strategies

• Introduction of new financial controls

• Changes in security controls

• Removal of all previous controls

What is the purpose of Annex B1 and B2 in the context of ISO 27001?

• To eliminate old standards

• To introduce new marketing strategies

• To provide backward compatibility with the 2013 version

• To offer financial incentives

How do Annex B1 and B2 assist users of ISO 27001?

• By eliminating the need for audits

• By providing a reference point for cross-referencing standards

• By offering new legal guidelines

• By introducing new financial controls

What is the relationship between the new and old standards in ISO 27001?

• They are completely unrelated

• The new standard builds on the old one with backward compatibility

• The old standard is entirely replaced

• The new standard focuses on financial aspects