What’s the Difference Between ISO 27001:2013 and ISO 27001:2022?

Originally published by A-LIGN. Written by Adam Lubbert, A-LIGN. At the end of October 2022, the International Organization for Standardization (ISO) published a new version of ISO/IEC 27001:2022. ISO 27001 is the world’s leading information security standard, providing control requirements to create an Information Security Management System (ISMS). ISO 27001:2022 is a moderate update from the previous version of the standard: ISO 27001:2013. The bulk of changes are related to the Annex contr...

adam a-lign control control requirements end iec iec 27001:2022 information information security information security management information security management system international isms iso iso 27001 management october organization requirements security security standard standard standardization system update version world