Skip to content
Compliance Framework

ISO 27001

Information Security Management System

The international standard for information security management. ISO 27001 provides a systematic approach to managing sensitive company information through risk assessment and control implementation.

Overview

ISO 27001 requires organizations to establish, implement, maintain, and continually improve an Information Security Management System (ISMS). It includes 93 controls across 4 themes in the 2022 revision.

Key Requirements

01

Organizational Controls (37)

Policies, roles, responsibilities, threat intelligence, asset management, and access control requirements.

02

People Controls (8)

Screening, terms of employment, awareness training, disciplinary processes, and remote working guidelines.

03

Physical Controls (14)

Physical security perimeters, equipment protection, secure disposal, and clear desk/screen policies.

04

Technological Controls (34)

Endpoint devices, privileged access, information access restriction, secure development, and monitoring.

How iQ Pulse
automates ISO 27001

Statement of Applicability automation

iQ Pulse generates your SoA by analyzing your control environment and mapping it to all 93 Annex A controls.

Risk assessment integration

Correlate your risk register with control implementations, ensuring every identified risk has a corresponding treatment.

Continuous ISMS monitoring

Track control effectiveness over time with automated metrics and alerts when controls drift from their expected state.

Other Frameworks

Get ISO 27001 compliant
faster.

Upload your policies, connect your systems, and let iQ Pulse map your controls to ISO 27001 requirements automatically. Audit-ready in weeks, not months.