ISO/IEC 27001 2022 Standard

The ISO/IEC 27001:2022 standard at a glance

ISO/IEC 27001:2022 is the new version of the Standard detailing the specifications of an ISMS, which your organisation can implement to improve its information security.

ISO 27001 and its code of practice, ISO 27002, were last updated in 2013.

How does ISO/IEC 27001:2022 differ from ISO/IEC 27001:2013?

• New requirements on planned changes and how your organisation should deal with them.
• More focus on how the organisation must deal with the needs and expectations of interested parties.
• Objectives must now be documented and monitored. (There's a double requirement for the documentation - one requires that the objectives be available as documented information, another requires that the organisation retain documented information about the objectives.)
• More alignment with the common phrasing used across ISO management system standards.

For further guidance on ISO/IEC 27001:2022 and why you need it, please visit our information pages.

You can also buy the Standard with its companion standard, ISO/IEC 27002:2022, together in one kit here.