Note sull'episodio
Use code QXQ25 for all my deals
ISO/IEC 27002:2022 Information Security Controls: A Comprehensive Briefing
The third edition of ISO/IEC 27002, published on February 15, 2022, serves as a critical reference for organizations implementing an Information Security Management System (ISMS). In an era where cybercriminals increasingly target business information for financial gain and organizations are integrating Operational Technology (OT) with Information Technology (IT), these controls are essential for managing risk to an acceptable level.
The 2022 update modernizes the framework by consolidating controls and introducing a new taxonomy based on themes and attributes. The standard now consists of 93 controls categorized into four themes: Organizational, People, Physical, and Technological. This version is designed to align information security with broader business objectives, ensure compliance with legal obligations, and provide a dynamic approach to risk management within the Plan-Do-Check-Act (PDCA) model