ADL Consulting supporting businesses to transition to the new ISO 27001:2022

LEICESTER, LEICESTERSHIRE, UNITED KINGDOM, October 31: For those who haven’t heard yet - the new version of ISO 27001 has just been released (25th October 2022). The ISMS standard was first published in 2005, updated in 2013, and has undergone a revamp this year with significant changes to the technical controls described in Annex A. Practically, this means that: - Organisations working towards becoming ISO 27001 certified will (from the release of the new version) be expected to certify to the new version. - Those already ISO 27001 certified will have a 2 year transition window to update their ISMS to meet the requirements of the new version of the Standard. What is ISO 27001? ISO 27001 is an information security standard that sets the bar for developing and maintaining an ISMS. It is an internationally recognised standard that helps companies to protect the confidentiality, integrity and availability of their information. ISO 27001 is made up of 2 parts: - Management Clauses (4-10); and - Annex A technical controls ISO 27001 Annex A only lists the security controls, it does not explain how to implement them into an ISMS. BUT, fear not! Annex A comes with a sexy sidepiece: ISO 27002 - which basically explains in detail what all the controls in Annex A mean. 27002 provides extensive guidance on HOW the controls can be implemented into an organisation - think Appendix - but not WHAT controls need implementing (again this is ISO 27001). To be clear though, ISO 27001 is the main standard. Organisations can get certified against ISO 27001, but not against ISO 27002. What do ISO 27001:2022 changes look like? We know that the Annex A controls have changed, because ISO 27002:2022 has already been released (remember the sexy sidepiece). From ISO 27002:2022 we can draw a good image of what those controls look like by translating them from ISO 27002:2013 to ISO 27001:2022. The main changes that have taken place so far are: - Security controls in Annex A have been revised - The number of the controls has been reduced from 114 to 93 - Controls have been combined into just 4 sections, rather than the prior 14 - Controls have been merged - rather than deleted - There are 11 new controls The management clauses 4 to 10 remain more or less the same. This is because the clauses 4-10 are more or less the same for all the ISO standards and none of the other ISO standards have undergone revisions. But Annex A is unique to ISO 27001 - it is the only one of the ISO standards with an additional guide attached (ISO 27002). The Clauses 4-10 cover: - Clause 4 - context of organisation - Clause 5 - leadership - Clause 6 - planning - Clause 7 - support - Clause 8 - operation - Clause 9 - performance evaluation - Clause 10 - continued improvement The changes to the Clauses part are minor - they intend to simplify ISO 27001 implementation, making life easier for users - and auditors! What work is required? As described previously, the changes to the standards predominantly concern controls (breathe a sigh of relief!). To begin to prepare for your compliance with these changes, organisations can: - Build a new statement of Applicability based on the new ISO 27002:2022 - Start to map controls from the old Annex A ISO 27002:2013, to the ones that line up with the new Annex A ISO 27002:2022 controls - Notice and keep note of the gaps - as we said before, some of the controls have merged, and there are 11 new ones When does this change need to happen? Those already certified to ISO 27001 will have 2 years from the date of their next audit to complete the transition. There is no reason, however, as to why organisations shouldn’t start this process now. Don’t worry, there is plenty of time to make the required changes. How can ADL Consulting help with the transition to the new and improved ISO 27001? ADL Consulting specialise in ISO 27001 and would be more than happy to help organisations looking for a helping hand with this process or some support in the changeover to ensure a seamless transition from ISO 27001:2013 to ISO 27001:2022.

Comments

Post a Comment

Popular posts from this blog

The Conference Board Consumer Confidence Index® Surged in March

NEW YORK, March 30: The Conference Board Consumer Confidence Index® surged in March to its highest reading in a year, after a modest increase in February. The Index now stands at 109.7 (1985=100), up from 90.4 in February. The Present Situation Index—based on consumers' assessment of current business and labor market conditions—climbed from 89.6 to 110.0. The Expectations Index—based on consumers' short-term outlook for income, business, and labor market conditions—also improved, from 90.9 last month to 109.6 in March. The monthly Consumer Confidence Survey®, based on a probability-design random sample, is conducted for The Conference Board by Nielsen, a leading global provider of information and analytics around what consumers buy and watch. The cutoff date for the preliminary results was March 19. "Consumer Confidence increased to its highest level since the onset of the pandemic in March 2020," said Lynn Franco, Senior Director of Economic Indicators at The C
variednewsandviews.blogspot.com

APWG REPORT: Phishing Assaults Double in 2020 and October Breakd All-Time Monthly Records

CAMBRIDGE, Mass., Feb. 9: The APWG's new Phishing Activity Trends Report shows that the number of phishing assaults witnessed by APWG members increased during 2020, wholly doubling over the course of the year. Attacks topped in October 2020, with a high of 225,304 new phishing sites appearing in that month alone, breaking all earlier monthly records. In Brazil, security firm Axur saw a slower growth in the number of phishing attacks that targeted Brazilian companies and consumers in Brazil. But overall, Axur observed almost twice as many such phishing sites in 2020 as it did in 2019, a concerning year-over-year growth. APWG contributor OpSec Security found that phishing that targeted financial institutions was the largest category of phishing in the fourth quarter, at 22.5 percent of all attacks. This category nosed out webmail and Software-as-a-Service (SaaS), which experienced 22.2 percent of all attacks. Phishing against the social media sector declined slightly to 11.8
variednewsandviews.blogspot.com

Silipos Commences Active Range of Foot Care Products: New Products Offer Foot Comfort and Guard from Active Routines

NIAGARA FALLS, N.Y., March 2: Silipos, the worldwide frontrunner in gel knowhow, recently launched Silipos Active, a novel line of foot support products aimed to avert as well as alleviate pain linked to a range of prevalent sicknesses. Created with sportspersons as well as weekend combatants in mind, the Silipos Active range comprises 16 diverse products that aid avert as well as remedy a range of problems for example corns, calluses, ingrown toenails, blisters, bunions, Achilles tendonitis, bursitis, sprains, as well as common foot discomfort. "The launch of Silipos Active reinforces our mission to continually deliver innovative products that prevent injury and help people recover faster so they can stay active and get back to doing what they are most passionate about," revealed the president of Silipos, Josh Margolis, adding, "It's exciting to see the initial interest in Silipos Active from consumers and retailers, and we're confident this line o
variednewsandviews.blogspot.com