Get ANNEX-A

Broadly speaking, the number of security controls in the new version of ISO 27002:2022 has decreased from 114 controls in 14 clauses in the 2013 edition to 93 controls in the 2022 edition. These security controls are now categorised into four control “themes.”

What is the ISO 27001 Annex A? ISO 27001 Annex A is arguably the most well-known annex of all the ISO standards, as it contains an essential instrument for managing information security risks: a list of security controls (or safeguards) that should be used to strengthen the security of information assets.

Annex A. 11.1 is about ensuring secure physical and environmental areas. The objective of this Annex is to prevent unauthorised physical access, damage and interference to the organisation's information and information processing facilities.

Annex A. 13.1 is about network security management. The objective in this Annex is to ensure the protection of information in networks and its supporting information processing facilities.

Annex A of ISO 27001: 2013 comprises 114 controls which are grouped into the following 14 control categories: Information Security Policies. Organisation of Information Security. Human Resources Security.

Annex A of ISO 27001: 2013 comprises 114 controls which are grouped into the following 14 control categories: Information Security Policies. Organisation of Information Security.

What are the Annex A Controls? Annex A of the ISO 27001 standard consists of a list of security controls organizations can utilize to improve the security of their information assets. ISO 27001 comprises 114 controls divided into 14 sections, also known as domains.

ISO 27701 has 135 controls that amend or modify ISO 27001, and there are also 49 controls that outline new guidance regarding PII. These additional PII security controls are what make ISO 27701 a privacy framework.