Cybersecurity Briefing — ISO/IEC 27002:2022 control updates published
On 15 February 2022 ISO released the updated ISO/IEC 27002:2022 standard, restructuring security controls, adding attributes, and introducing new guidance on threat intelligence, cloud, and physical monitoring.
ISO published ISO/IEC 27002:2022 on 15 February 2022, revising the guidance that underpins Annex A controls in ISO/IEC 27001. The update consolidates controls into four themes (organizational, people, physical, technological), adds attributes for mapping, and introduces new practices on threat intelligence, cloud services, secure coding, data leakage prevention, and physical security monitoring.
Security and compliance teams preparing for ISO/IEC 27001:2022 certification should refresh Statements of Applicability, update control mappings to the new attribute model, and plan evidence collection for the added controls before surveillance or recertification audits.
- ISO catalogue entry confirms publication of ISO/IEC 27002:2022 and outlines its scope.
- ISO preview shows the revised control structure and titles for mapping and gap analysis.
Continue in the Cybersecurity pillar
Return to the hub for curated research and deep-dive guides.
Latest guides
-
Cybersecurity Operations Playbook — Zeph Tech
Use Zeph Tech research to align NIST CSF 2.0, CISA KEV deadlines, and sector mandates across threat intelligence, exposure management, and incident response teams.