Mapping ISO 27001- 2013 and ISO 27001- 2022 ANNEX A controls

What is the primary reason for updating the ISO standard?

• To increase the number of domains

• To simplify the standard

• To reflect changes in the threat landscape and emerging technologies

• To reduce the number of controls

How are most controls from the 2013 version mapped to the 2022 version?

• One-to-one mapping

• One-to-many mapping

• No mapping

• Many-to-one mapping

What resource is provided for understanding the control mappings?

• A printed book

• A PDF guide

• An Excel document

• A video tutorial

Which new control topic is highlighted as important in the updated standard?

• Network Security

• Information Security for Cloud Services

• Data Encryption

• User Access Management

What is the only new control in the physical controls section?

• Data Backup

• Incident Response

• Physical Security Monitoring

• Access Control

Which technological control is newly introduced in the updated standard?

• Web Filtering

• Data Encryption

• Network Monitoring

• User Authentication

How are the old standard domains mapped in the new standard?

• To new functions like organizational and technological

• Directly to new controls

• They are not mapped

• To a single new domain