ISO 27001:2022 – Information Security Management System

Overview

ISO 27001:2022 is the leading international standard for Information Security Management Systems. It provides a risk-based framework for protecting information assets — confidentiality, integrity, and availability — through systematic identification of information security risks, implementation of appropriate controls, and continuous monitoring and improvement.

The 2022 revision updated Annex A from 114 controls (14 domains) to 93 controls (4 themes): Organisational (37 controls), People (8 controls), Physical (14 controls), and Technological (34 controls). New controls include: Threat Intelligence, Cloud Security Configuration, Data Leakage Prevention (DLP), ICT Supply Chain Security, Information Deletion, Data Masking, and Secure Coding.

Key deliverables: Information Security Policy, Asset Register, Risk Assessment and Treatment Plan, Statement of Applicability (SoA), Annex A control implementation, Business Continuity Plan, Incident Response Procedure, and Supplier Security Policy.

Key benefits: Enterprise client requirement (IT companies, BPOs, fintech must hold ISO 27001), regulatory compliance support (RBI IT Framework, SEBI Cybersecurity Framework, DPDPA 2023), data breach prevention, GDPR Article 32 compliance foundation, and competitive differentiation in IT services.

MFiling implementation support: from Rs.39,999 (exclusive of certification body fees).

Key Benefits

Documents Required

How it Works

Frequently Asked Questions