What are the new requirements in ISO 27001:2022

The video tutorial explains the restructuring of controls from 114 to 93, now categorized into four main groups: Organizational, People, Physical, and Technological. This change simplifies the implementation of standards. The previous 14 domains have been consolidated, making it easier to manage security policies, human security, asset management, and more. Annex A provides a detailed description of each control, its benefits, and guidance for implementation, serving as a foundation for organizations to develop their information security management systems (ISMS).

What was the number of controls reduced to in the updated 270012022 changes?

• 114

• 93

• 14

• 4

Into how many overarching groups are the controls now categorized?

• 114

• 4

• 93

• 14

Which of the following was NOT a previous category of security controls?

• Security policy

• Human security

• Asset management

• Organizational

What is included in each control in Annex A?

• Only the intended outcomes

• A list of organizations using the control

• A brief description, intended outcomes, and guidance

• A detailed history of the control

How can organizations use the controls in Annex A?

• As a marketing tool

• To develop their information security management systems

• To replace their existing security policies

• As a final solution for all security issues