thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Annex A

Reference control set in ISO/IEC 27001 listing 93 information security controls in four themes.

Definition

Annex A of ISO/IEC 27001:2022 lists control objectives and controls aligned with ISO/IEC 27002. Organizations compare risk treatment controls against Annex A to ensure none are overlooked. Clauses 5 through 8 of Annex A cover organizational, people, physical, and technological controls.

Example

Annex A 5.23 addresses information security for use of cloud services.

Exam tip

The 2022 revision reduced 114 controls in 14 domains to 93 controls in 4 themes.

Related terms