ISO/IEC 27001 : 2022
The standard your customers check before trusting you with their data
Information Security Management
ISO/IEC 27001 specifies the requirements for an information security management system. It is the certification enterprise buyers, financial institutions and government departments ask for before sharing data with a supplier — and increasingly a condition of winning the contract at all.
The 2022 revision
ISO/IEC 27001:2022 restructured the Annex A controls from 114 into 93, organised under four themes — organisational, people, physical and technological — and introduced controls addressing cloud services, threat intelligence, data leakage prevention and secure coding. Organisations certified to the 2013 version transition to 2022.
What implementation involves
- Defining the scope: which systems, data, sites and people are covered.
- Risk assessment and a documented risk treatment plan.
- A Statement of Applicability justifying each control you apply or exclude.
- Policies, access control, supplier security, incident response and business continuity.
- Internal audit and management review before certification assessment.
Who needs it
Software and SaaS companies, IT services and BPO providers, data centres, fintech, healthcare technology, and any organisation processing personal or commercially sensitive data on behalf of clients.
Not sure whether this is the standard your customer is actually asking for? Send us the requirement and we will tell you — even if the answer is a smaller job than you expected.
You may also need
Quality Management System
The world’s most recognised management standard. Proves your organisation consistently delivers what it promises.
Learn moreEnvironmental Management System
Demonstrates measurable control of your environmental impact — increasingly required in tenders and supply chains.
Learn moreOccupational Health & Safety
The international benchmark for worker safety, replacing OHSAS 18001 across every sector.
Learn moreFood Safety Management
End-to-end food safety control built on HACCP principles, from raw material to plate.
Learn moreEnergy Management System
A structured route to lower energy consumption, lower cost and credible sustainability reporting.
Learn moreLearning Services Outside Formal Education
For training providers, coaching firms and academies who want their programmes independently recognised.
Learn moreGood Manufacturing Practice
Essential for pharmaceutical, nutraceutical, cosmetic and food manufacturers selling into regulated markets.
Learn moreStart your ISO/IEC 27001 certification
Fixed price agreed up front. Certificate issued in 3 to 7 working days.