Buy ISO/IEC 27002:2022

Information security, cybersecurity and privacy protection — Information security controls

Available format(s)

Hardcopy , PDF

Language(s)

English, French

Published date

15-02-2022

Publisher

International Organization for Standardization

€219.00

Excluding VAT

Summarise this standard

AI-generated summary

This document provides a reference set of generic information security controls including implementation guidance. This document is designed to be used by organizations:

a) within the context of an information security management system (ISMS) based on ISO/IEC27001;

b) for implementing information security controls based on internationally recognized best practices;

c) for developing organization-specific information security management guidelines.

Committee	ISO/IEC JTC 1/SC 27
DocumentType	Standard
Pages	152
PublisherName	International Organization for Standardization
Status	Current
Supersedes	ISO/IEC 27002:2013 ISO/IEC 27002:2013/Cor 1:2014 ISO/IEC 27002:2013/Cor 2:2015

Standards	Relationship
CEI UNI EN ISO/IEC 27002:2023	Identical
NBR ISO/IEC 27002:2022	Identical
AS/NZS ISO/IEC 27002:2022	Identical
NEN-EN-ISO/IEC 27002:2022	Identical
DS/ISO/IEC 27002:2022	Identical
DS/EN ISO/IEC 27002:2022/Ret.1:2024	Identical
BS EN ISO/IEC 27002:2022	Equivalent
I.S. EN ISO/IEC 27002:2022	Identical
JIS Q 27002:2024	Identical
UNE-EN ISO/IEC 27002:2023	Identical
ÖVE/ÖNORM EN ISO/IEC 27002:2023 07 01	Identical

Frequently Asked Questions

ISO/IEC 27002 provides implementation guidance for organisational, people, physical and technological information security controls. In practice it is applied by security and risk teams selecting and implementing controls, commonly in support of ISO/IEC 27001.

ISO/IEC 27002 is ISO and IEC's standard for information security controls, while ISO/IEC 27001 covers information security management systems (International). ISO/IEC 27002 provides implementation guidance for organisational, people, physical and technological information security controls. ISO/IEC 27001 sets requirements for establishing, operating and improving an information security management system.

ISO/IEC 27002 is an international standard published by ISO and IEC, and is applied internationally rather than in a single country.

ISO/IEC 27002 is used by security and risk teams selecting and implementing controls, commonly in support of ISO/IEC 27001. It is an international standard published by ISO and IEC.

ISO/IEC 27002 provides implementation guidance for organisational, people, physical and technological information security controls. It is an international standard published by ISO and IEC.

€219.00

Excluding VAT

Product format

I agree to the DRM document license rules apply against the PDF selection made.

Please confirm that you agree to the document license rules for this document.

I agree to the document license rules .

Please confirm that you agree to the document license rules for this document.

Shopping Cart

ISO/IEC 27002:2022

Information security, cybersecurity and privacy protection — Information security controls

Abstract

General Product Information

International Equivalents

Standards Referenced By This Book

Industry

Sub-Industry

What is ISO/IEC 27002 used for?

What is the difference between ISO/IEC 27002 and ISO/IEC 27001?

Where does ISO/IEC 27002 apply?

Who is ISO/IEC 27002 written for?

What is the scope of ISO/IEC 27002?