ISO/IEC 27001:2022 Annex A

ISO/IEC 27001:2022 Annex A Reference

ISO/IEC 27001:2022 Annex A is a list of 93 information security controls across four themes (Organizational, People, Physical, Technological).

Searches the full set of criteria in the current language.

How to use

Step 1

Find by keyword

Type an item name or keyword in the search box. It searches the criteria in the current language.

Step 2

Browse by group

Pick a group from the header or the list below to scan the items it contains.

Step 3

Read with sources

Check each item's checkpoints, detail, evidence, and cases with their source.

Control themes

A.537 itemsOrganizational controls A.68 itemsPeople controls A.714 itemsPhysical controls A.834 itemsTechnological controls

Sources

Control numbers, titles and the four-theme classification are based on the public list of ISO/IEC 27001:2022 Annex A. English titles keep the wording of its Table A.1; Korean titles are this collection's rendering. Amd 1:2024 amends main-body clauses 4.1 and 4.2 only; Annex A is unchanged.

The item documents are for reference; verify final decisions against the source and the certification body's guidance.

Control numbers, titles, and theme classification are based on the public list of ISO/IEC 27001:2022 Annex A. The explanatory text is original material and is not the normative text of the ISO standard. For an authoritative check, use a licensed copy of the standard.