Back to ISO
Management system · 2022 edition
ISO/IEC 27001
Information security, including the 93 Annex A controls and the 2024 climate amendment. A statement of applicability is part of the register.
Record
The controls and the statement
The standard
ISO/IEC 27001:2022
Where it is used
On the clause register
What it does
- Information security, including the 93 Annex A controls and the 2024 climate amendment.
- A statement of applicability is part of the register. It is not a separate page.
- The app holds the record. It does not issue the certificate.
On the record
- Turn the standard on only if you hold it, or you are working towards it.
- A clause is not started, a gap, in progress, or evidenced.
- Readiness is the share of evidenced clauses. ISO 31000 is not in that score.
The standard
ISO/IEC 27001:2022
Information security. The statement of applicability is part of the register.
Also in Management system
All- ISO 9001Quality management for how the organisation delivers its work. The published standard is ISO 9001:2026.
- ISO 14001Environmental management for aspects, obligations, and planned change. The published standard is ISO 14001:2026.
- ISO 45001Occupational health and safety for workers and other interested parties. The published edition is still 2018.
- ISO 22301Business continuity for the 2019 edition, including the 2024 climate amendment. The impact analysis, plans, and exercises are on the register.
- ISO/IEC 42001AI management for the 2023 edition. The 38 Annex A controls and the impact assessment are on the register.
- ISO 50001Energy management for the 2018 edition, including the 2024 climate amendment. The energy review, indicators, and baseline are on the register.
- ISO 39001Road traffic safety for the 2012 edition, including the 2024 climate amendment. Numbering follows this standard, including crash investigation.
- ISO 31000Risk management guidance from the 2018 edition. This is a maturity record. It is not part of the certification readiness score.
- ISO 55001Asset management on the 2024 edition, which replaces 2014. ISO 55000 and ISO 55002 are guidance and are not assessed.
- ISO 37001Anti-bribery management on the 2025 edition. Certificates to the 2016 edition run to about 28 February 2027.
- ISO 13485Medical devices quality management for regulatory purposes. The published edition is still 2016. This register is not an FDA or MDR submission.
- ISO 22000Food safety management. The 2024 climate amendment is in the checks. A draft revision is not assessed.