Framework template
The international standard for information security management. ISO 27001 asks an organisation to run a risk-based management system and to implement the Annex A controls its risk assessment selects.
Bundled template
ISO 27001:2022
93 controls · 4 categories
| Control | Category |
|---|---|
| A.5.1Policies for information security | Organizational |
| A.5.2Information security roles | Organizational |
| A.5.3Segregation of duties | Organizational |
| A.5.4Management responsibilities | Organizational |
| A.5.5Contact with authorities | Organizational |
| A.5.6Contact with special interest groups | Organizational |
| A.5.7Threat intelligence | Organizational |
| A.5.8Information security in project management | Organizational |
| and 85 more | |
Information security management systems
In practice
The 2022 revision organises 93 Annex A controls into four themes: organisational, people, physical and technological. Certification is by an accredited body against the management system, the Statement of Applicability and the evidence that the selected controls operate.
Requirements
01
Policies, roles and responsibilities, threat intelligence, asset management, access control and supplier relationships.
02
Screening, terms of employment, awareness training, disciplinary process and remote working.
03
Security perimeters, equipment protection, secure disposal, and clear desk and clear screen.
04
Endpoint devices, privileged access, information access restriction, secure development, logging and monitoring.
How the Desk helps
Each step below is shipped: the template import in Compliance Studio, and workflows that run over the documents you choose, record their sources and hold for approval before export.
Start from the 93 controls with their themes, and track applicability, status and owner for each one.
Run Review controls over your ISMS policies and procedures. The run records every document it read; a control memo in Compliance Studio names the gaps for any control.
Evidence is held per control with its verification status. Find missing evidence and Prepare audit checklist run over the evidence documents you select, with every source on record, and export once approved.
Other templates
Next step
Bring the policies you have and the last audit's request list. We will import the template, run the workflows with you and hand back the controls, the evidence on file and each run's sources.
Security
GDPR and CCPA compliant, ISO 27001 aligned, SOC 2 Type II in progress. Encrypted at rest and in transit. Your data never trains a model.
Security page