thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

ISO/IEC 27001

International standard specifying requirements for establishing, implementing, maintaining, and improving an information security management system.

Definition

ISO/IEC 27001:2022 contains Clauses 4 to 10 (context, leadership, planning, support, operation, performance evaluation, improvement) and Annex A with 93 controls in four themes. Organizations can be certified by accredited certification bodies after audits. The 2013 version transition deadline was 31 October 2025, and Amendment 1 (2024) added climate change considerations.

Example

A SaaS company achieves ISO/IEC 27001:2022 certification to satisfy enterprise customers.

Exam tip

27001 is certifiable and contains requirements ('shall'); 27002 is guidance.

Related terms