A significant information security standard has been revised

In a world where data security is a priority for every organization, keeping systems and processes up to date with the evolving security landscape is essential.

The new version of ISO/IEC 27002:2013 Information Technology - Security Techniques - Code of Practice for Information Security Controls is expected to be published (February 2022) as ISO/IEC 27002:2022 Information Security, Cybersecurity and Privacy Protection - Information Security Controls.

All organizations with an ISMS or Information Security good practices will have to map and update their controls in place against the new guidance on the updated ISO/IEC 27002, according to the organisational needs and context.

There are fewer controls in this new edition, 11 new ones have been added, some have been consolidated, and some have been eliminated.  Furthermore, the controls are organized into four groups based on their importance.

Read more about the revision here

View our FAQ document here

Training is necessary to effectively manage this change

• By using this new version of ISO/IEC 27002, you can implement controls that are more robust, relevant to your organization, and appropriate to the environment in which it operates
• The revision will help you prevent risk, build organizational resilience, and gain an advantage over your competitors
• BSI will help you become familiar with the new version and acquire the necessary knowledge to make the necessary changes to your security controls
• Understand the rationale behind the processes and usages related to the controls
• By providing clear and practical guidance, you will be able to effectively implement the controls