Back

ISO/IEC 27002:2022

Information security, cybersecurity and privacy protection — Information security controls (Corrected version 2022-03)

General information

Valid from 15.02.2022
ICS Groups
35.030 IT Security
Directives or regulations
None

Standard history

Status
Date
Type
Name
15.02.2022
Main
ISO/IEC 27002:2022
06.11.2015
Corrigendum
ISO/IEC 27002:2013/Cor 2:2015
18.09.2014
Corrigendum
ISO/IEC 27002:2013/Cor 1:2014
25.09.2013
Main
ISO/IEC 27002:2013
This document provides a reference set of generic information security controls including implementation guidance. This document is designed to be used by organizations:
a) within the context of an information security management system (ISMS) based on ISO/IEC27001;
b) for implementing information security controls based on internationally recognized best practices;
c) for developing organization-specific information security management guidelines.

Required fields are indicated with *

*
*
*
PDF
283.20 € incl tax
PDF redline
339.84 € incl tax
Standard monitoring
English (PDF 811 KB)

Related products

Main

EVS-EN ISO/IEC 27001:2017

Information technology - Security techniques - Information security management systems - Requirements (ISO/IEC 27001:2013 including Cor 1:2014 and Cor 2:2015)
Withdrawn from 15.08.2023
Main

EVS-EN ISO/IEC 27001:2023

Information security, cybersecurity and privacy protection - Information security management systems - Requirements (ISO/IEC 27001:2022)
Newest version Valid from 15.08.2023
Main

EVS-EN ISO/IEC 27002:2022

Information security, cybersecurity and privacy protection - Information security controls (ISO/IEC 27002:2022)
Newest version Valid from 01.12.2022
Main

EVS-EN ISO/IEC 27002:2017

Information technology - Security techniques - Code of practice for information security controls (ISO/IEC 27002:2013 including Cor 1:2014 and Cor 2:2015)
Withdrawn from 01.12.2022

Customers who bought this item also bought

Main

ISO/IEC 27001:2022

Information security, cybersecurity and privacy protection — Information security management systems — Requirements
Newest version Valid from 25.10.2022
Main

EVS-EN ISO/IEC 27000:2020

Information technology - Security techniques - Information security management systems - Overview and vocabulary (ISO/IEC 27000:2018)
Newest version Valid from 19.03.2020
Main

ISO/IEC 27005:2022

Information security, cybersecurity and privacy protection — Guidance on managing information security risks
Newest version Valid from 25.10.2022
Main

EVS-EN ISO/IEC 27701:2021

Security techniques - Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management - Requirements and guidelines (ISO/IEC 27701:2019)
Newest version Valid from 03.05.2021

Standards designation

EVS Estonian standard
EN European standard (published by an CEN or CENELEC)
EN ISO International standard adopted as an European standard
ISO International Organization for Standardization’s standard
IEC International Electrotechnical Commission’s standard
HD CENELEC’s harmonisation document
   
EVS-EN European standard implemented in Estonia
EVS-EN ISO International standard adopted in Europe and implemented in Estonia
EVS-EN ISO/IEC International standard/International electrotechnical standard adopted in Europe and implemented in Estonia
EVS-IEC International electrotechnical standard implemented in Estonia
EVS-ISO International standard implemented in Estonia
   
A, AMD amedment
+A a full standard plus the amendment
/A only amendment
COR, AC corrigendum
+COR a full standard plus the corrigendum
NA national annex
+NA a full standard plus the national annex
/NA only national annex
TS technical specification
TR technical report
CWA agreement, developed by a CEN or CENELEC
prEVS-EN (etc) draft standard
   
et the standard is in Estonian only
en the standard is in English only
et-en the standard is in Parallel text Estonian-English