5 طرق لاستخدام نظام نصائح السلامة لمغامرات الشتاء باستخدام رمز ...
رمز الاستجابة السريعة نصائح للسلامة في مغامرات الشتاء نظام:ما هي نصائح السلامة في فصل الشتاء؟ · تقديم معلومات حول الحياة البرية في الحديقة ...
Dec 22, 2023
ايزو 27001
إحدى مزايا QR TIGER هو أنه برنامج رمز QR معتمد من ISO. إنه <anchor>ايزو 27001</anchor> تعني الشهادة أنها تلتزم بأقصى معايير السلامة في أدواتها، وحماية البيانات، وتدابير تخفيف المخاطر.
ISO/IEC 27001:2022 - Information security management systems
ISO/IEC 27001:2022 - Information security management systems[Skip to main content](#content)

[ISO Annual Meeting 2024 \| Check our live page to stay tuned for the latest updates](https://www.iso.org/annualmeeting/live "annual-meeting-2024")

- [Applications](https://login.iso.org "ISO's applications portal")
- [OBP](https://www.iso.org/obp/ui/en/ "Online Browsing Platform")
- English  - [español](/es/contents/data/standard/08/28/82875.html)
  - [français](/fr/standard/27001)
  - [русский](/ru/standard/27001)

[International Organization for Standardization](/home.html "International Organization for Standardization")

![ISO logo for print](/modules/isoorg-template/img/iso/iso-logo-print.gif)

Menu

- [Standards](/standards.html "Covering almost every product, process or service imaginable, ISO makes standards used everywhere.")
- Sectors






[Health](/sectors/health "(including medicine and laboratory equipment)")



[IT & related technologies](/sectors/it-technologies "(including communication technology, graphics and photography)")



[Transport](/sectors/transport "(including vehicles, parts and infrastructure, freight, packaging and distribution)")



[Environmental sustainability](/sectors/environment)



[Management & services](/sectors/management-services "(Business management, financial and professional services)")



[Security, safety and risk](/sectors/security-safety-risk)



[Energy](/sectors/energy "(including power generation and transport, fuels)")



Food and agriculture



Building and construction



Engineering



Materials



Diversity and inclusion

- [About ISO](/about "ISO brings together global experts to develop International Standards that help solve problems and drive innovation.")
- [News](/news.html "Keep up to date with the latest in standardization or browse our rich archives")
- [Taking part](/developing-standards.html "Find out how the ISO process bring together global experts to create standards that are chosen the world over.")
- [Store](/store.html "Are you looking to buy International Standards, guidelines, collections and checklists? They're all right here, in the ISO Store.")

[Cart](/webstore/checkout?memberId=ISO&guilang=en "Shopping cart")

![](/modules/iso-jahia-service-module/img/iso-iec-logo.png)

Reference number

ISO/IEC 27001:2022

© ISO 2024

International Standard

ISO/IEC 27001:2022

Information security, cybersecurity and privacy protection — Information security management systems — Requirements

Edition 3

2022-10

![](/modules/iso-jahia-service-module/img/iso-standard-cover-thumbnail.png)[Read sample](https://www.iso.org/obp/ui/en/#!iso:std:82875:en)

ISO/IEC 27001:2022

82875

# ISO/IEC 27001:2022Information security, cybersecurity and privacy protection — Information security management systems — Requirements

[**Published**](#lifecycle "Life cycle")
(Edition 3, 2022)

This standard has [1 amendment](#amendment).


#### ISO/IEC 27001:2022

ISO/IEC 27001:2022

82875

Language

EnglishFrench

Format

PDF + ePub

PDF + ePub + Redline

Paper

PDF + ePub

PDF + ePub + Redline

Paper

CHF129

Add to cart

Convert Swiss francs (CHF) to [your currency](https://www.xe.com/en/currencyconverter/convert/?Amount=129&From=CHF&To=EUR)

[Discover the new ISO/IEC 27001:2022 Handbook](#promo)

The purpose of this handbook is to assist SMEs in establishing and maintaining an ISMS as per ISO/IEC 27001, the premier standard for information security.

## What is ISO/IEC 27001?

ISO/IEC 27001 is the world's best-known standard for **information security management systems (ISMS)**. It defines requirements an ISMS must meet.

The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishing, implementing, maintaining and continually improving an information security management system.

Conformity with ISO/IEC 27001 means that an organization or business has put in place a system to manage risks related to the security of data owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.

## Why is ISO/IEC 27001 important?

With cyber-crime on the rise and **new threats** **constantly emerging**, it can seem difficult or even impossible to manage cyber-risks. ISO/IEC 27001 helps organizations become risk-aware and proactively identify and address weaknesses.

ISO/IEC 27001 promotes a holistic approach to information security: vetting people, policies and technology. An information security management system implemented according to this standard is a tool for **risk management, cyber-resilience** and **operational excellence.**

### Get extra value in your mailbox

Register for related resources and updates, starting with an **information security maturity checklist**.

Subscribe

**Almost done!**

You are only one step away from joining the ISO subscriber list. Please confirm your subscription by clicking on the email we've just sent to you. You will not be registered until you confirm your subscription. If you can't find the email, kindly check your spam folder and/or the promotions tab (if you use Gmail).

How your data will be used

Please see [ISO privacy notice](/privacy.html "privacy-and-copyright"). This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.

[Play Video](https://vimeo.com/879442758 "Play Video")

What is ISO/IEC 27001: Guide to Information Security Management Systems

## Benefits

- **Resilience** to cyber-attacks
- **Preparedness** for new threats
- Data **integrity**, **confidentiality** and **availability**
- Security across **all supports**
- **Organization-wide** protection
- **Cost savings**

### FAQ

### Who needs ISO/IEC 27001?

Nowadays, data theft, cybercrime and liability for privacy leaks are risks that **all organizations** need to factor in. Any business needs to think strategically about its information security needs, and how they relate to its own objectives, processes, size and structure. The ISO/IEC 27001 standard enables organizations to establish an information security management system and apply a risk management process that is **adapted to their size and needs**, and scale it as necessary as these factors evolve.

While information technology (IT) is the industry with the largest number of ISO/IEC 27001- certified enterprises (almost a fifth of all valid certificates to ISO/IEC 27001 as per the ISO Survey 2021), the benefits of this standard have convinced **companies across all economic sectors** (all kinds of services and manufacturing as well as the primary sector; private, public and non-profit organizations).

Companies that adopt the holistic approach described in ISO/IEC 27001 will make sure information security is built into organizational processes, information systems and management controls. They gain efficiency and often **emerge as leaders within their industries**.

### How will ISO/IEC 27001 benefit my organization?

Implementing the information security framework specified in the ISO/IEC 27001 standard helps you:

- Reduce your vulnerability to the growing threat of **cyber-attacks**
- Respond to **evolving security risks**
- Ensure that assets such as financial statements, intellectual property, employee data and information entrusted by third parties remain **undamaged, confidential, and available** as needed
- Provide a **centrally managed framework** that secures all information in one place
- Prepare **people, processes and technology** throughout your organization to face technology-based risks and other threats
- Secure **information in all forms**, including paper-based, cloud-based and digital data
- **Save** **money** by increasing efficiency and reducing expenses for ineffective defence technology

### What are the three principles of information security in ISO/IEC 27001, also known as the CIA triad?

1. **Confidentiality** → _Meaning:_ Only the right people can access the information held by the organization.

    ⚠ _Risk example:_ Criminals get hold of your clients’ login details and sell them on the Darknet.
2. **Information integrity** **→** _Meaning:_ Data that the organization uses to pursue its business or keeps safe for others is reliably stored and not erased or damaged.

    ⚠ _Risk example:_ A staff member accidentally deletes a row in a file during processing.
3. **Availability of data:**

    → _Meaning:_ The organization and its clients can access the information whenever it is necessary so that business purposes and customer expectations are satisfied.

    ⚠ _Risk example:_ Your enterprise database goes offline because of server problems and insufficient backup.

An information security management system that meets the requirements of ISO/IEC 27001 preserves the confidentiality, integrity and availability of information by applying a risk management process and gives confidence to interested parties that risks are adequately managed.

### Is ISO 27001 the same as ISO/IEC 27001?

Even though it is sometimes referred to as ISO 27001, the **official abbreviation** for the International Standard on requirements for information security management is ISO/IEC 27001. That is because it has been **jointly published by ISO and the International Electrotechnical Commission (IEC)**. The number indicates that it was published under the responsibility of Subcommittee 27 (on Information Security, Cybersecurity and Privacy Protection) of ISO’s and IEC’s Joint Technical Committee on Information Technology (ISO/IEC JTC 1).

### What is ISO/IEC 27001 certification and what does it mean to be certified to ISO 27001?

Certification to ISO/IEC 27001 is one way to demonstrate to stakeholders and customers that you are **committed and able** **to manage information securely and safely**. Holding a certificate from an accredited conformity assessment body may bring an additional layer of confidence, as an accreditation body has provided independent confirmation of the certification body’s competence. If you wish to use a logo to demonstrate certification, contact the certification body that issued the certificate. As in other contexts, standards should always be referred to with their full reference, for example “certified to ISO/IEC 27001:2022” (not just “certified to ISO 27001”). See full details about [use of the ISO logo](https://www.iso.org/iso-name-and-logo.html).

As with other ISO management system standards, companies implementing ISO/IEC 27001 can decide whether they want to go through a certification process. Some organizations choose to implement the standard in order to benefit from the best practice it contains, while others also want to get certified to **reassure customers and clients**.

ISO/IEC 27001 is widely used around the world. As per the ISO Survey 2022, over 70 000 certificates were reported in 150 countries and from all economic sectors, ranging from agriculture through manufacturing to social services.

### General information

- Status

: Published



Publication date

: 2022-10



Stage

: International Standard published \[ [60.60](#lifecycle)\]


- Edition

: 3



Number of pages

: 19

- Technical Committee :

[ISO/IEC JTC 1/SC 27](/committee/45306.html "Information security, cybersecurity and privacy protection")



ICS :

[35.030](/ics/35.030.html "IT Security")[03.100.70](/ics/03.100.70.html "Management systems")

- [RSS](/contents/data/standard/08/28/82875.detail.rss) updates

![](https://www.iso.org/obp/graphics/pub/5c32d731-45de-47ac-9887-34c3a7070087_dcd2304a361d0aebf097eac69420c5a6.jpg)

### [Information Security Management Systems: A practical guide for SMEs](/publication/PUB100484.html "PUB100484")

This handbook focuses on guiding SMEs in developing and implementing an information security management system (ISMS) in accordance with ISO/IEC 27001, in order to help protect yourselves from cyber-risks.

#### ISO/IEC 27001:2022 - Information Security Management Systems - A practical guide for SMEs

ISO/IEC 27001:2022 - Information Security Management Systems - A practical guide for SMEs

pub100484

Language

English

Format

PDF

Paper

CHF42

Add to cart

Convert Swiss francs (CHF) to [your currency](https://www.xe.com/en/currencyconverter/convert/?Amount=42&From=CHF&To=EUR)

### Amendments

Amendments are issued when it is found that new material may need to be added to an existing standardization document. They may also include editorial or technical corrections to be applied to the existing document.

#### [Amendment 1](/standard/88435.html)

##### Climate action changes

Edition 2024

ISO/IEC 27001:2022/Amd 1:2024

88435

Language

EnglishFrench

Format

PDF + ePub

Paper

PDF + ePub

Paper

CHF0

Add to cart

Shipping costs not included

### Life cycle

- #### Previously






Withdrawn



##### [ISO/IEC 27001:2013](/contents/data/standard/05/45/54534.html)







Withdrawn



##### [ISO/IEC 27001:2013/Cor 1:2014](/contents/data/standard/06/68/66805.html)







Withdrawn



##### [ISO/IEC 27001:2013/Cor 2:2015](/contents/data/standard/06/93/69378.html)

- #### Now




Published



##### ISO/IEC 27001:2022

[Stage: **60.60**](#stages)


  - [00\
    Preliminary](javascript:void(0))
  - [10\
    Proposal](javascript:void(0))    - [10.992022-05-30\
          \
           New project approved](/stage-codes.html#10_99)
  - [20\
    Preparatory](javascript:void(0))
  - [30\
    Committee](javascript:void(0))
  - [40\
    Enquiry](javascript:void(0))    - [40.992022-05-30\
          \
           Full report circulated: DIS approved for registration as FDIS](/stage-codes.html#40_99)
  - [50\
    Approval](javascript:void(0))    - [50.002022-06-09\
          \
           Final text received or FDIS registered for formal approval](/stage-codes.html#50_00)
    - [50.202022-07-28\
      \
       Proof sent to secretariat or FDIS ballot initiated: 8 weeks](/stage-codes.html#50_20)
    - [50.602022-09-23\
      \
       Close of voting. Proof returned by secretariat](/stage-codes.html#50_60)
  - [60\
    Publication](javascript:void(0))    - [60.002022-09-23\
          \
           International Standard under publication](/stage-codes.html#60_00)
    - [60.602022-10-25\
      \
       International Standard published](/stage-codes.html#60_60)
  - [90\
    Review](javascript:void(0))    - [90.20\
          \
           International Standard under systematic review](/stage-codes.html#90_20)
    - [90.60\
      \
       Close of review](/stage-codes.html#90_60)
    - [90.92\
      \
       International Standard to be revised](/stage-codes.html#90_92)
    - [90.93\
      \
       International Standard confirmed](/stage-codes.html#90_93)
    - [90.99\
      \
       Withdrawal of International Standard proposed by TC or SC](/stage-codes.html#90_99)
  - [95\
    Withdrawal](javascript:void(0))    - [95.99\
          \
           Withdrawal of International Standard](/stage-codes.html#95_99)

##### Amendments

Provide additional content; available for purchase; not included in the text of the existing standard.

Published

##### [ISO/IEC 27001:2022/Amd 1:2024](/standard/88435.html)

#### Got a question?

Check out our [Help and Support](/contact-iso.html "help-support")

Check out our [FAQs](/frequently-asked-questions-faqs.html "frequently-asked-questions-faqs")

Customer care

+41 22 749 08 88

[customerservice@iso.org](mailto:customerservice@iso.org)

* * *

Opening hours:

Monday to Friday - 09:00-12:00, 14:00-17:00 (UTC+1)

1. [Home page](/home.html "Home page")
2. [Store](/store.html)
3. [Standards catalogue](/standards-catalogue/browse-by-ics.html)
4. [ICS](/standards-catalogue/browse-by-ics.html)
5. [35](/en/ics/35.html)
6. [35.030](/en/ics/35.030.html)
7. ISO/IEC 27001:2022

[Sitemap](#collapseSitemap)

- [Standards](/standards.html "Covering almost every product, process or service imaginable, ISO makes standards used everywhere.")
  - [Benefits](/benefits-of-standards.html "Whether you run a business, work for a company or government, or you are a consumer looking for goods and services that meet customer expectations: Find out what standards can do for you.")
  - [Popular standards](/popular-standards.html "Here you can discover some of the best-known and most widely-used standards, as well as those that address recently emerged challenges affecting us all.  ")
  - [Conformity assessment](/conformity-assessment.html "A set of processes that show your product, service or system meets the requirements of a standard.")
  - [SDGs](/sdgs.html "Organizations and companies looking to contribute to the SDGs will find that International Standards provide effective tools to help them rise to the challenge.")
- Sectors
  - [Health](/sectors/health "(including medicine and laboratory equipment)")
  - [IT & related technologies](/sectors/it-technologies "(including communication technology, graphics and photography)")
  - [Transport](/sectors/transport "(including vehicles, parts and infrastructure, freight, packaging and distribution)")
  - [Environmental sustainability](/sectors/environment)
  - [Management & services](/sectors/management-services "(Business management, financial and professional services)")
  - [Security, safety and risk](/sectors/security-safety-risk)
  - [Energy](/sectors/energy "(including power generation and transport, fuels)")
- [About ISO](/about "ISO brings together global experts to develop International Standards that help solve problems and drive innovation.")
  - [What we do](/what-we-do.html "Find out how we develop and publish international standards by bringing together more than 160 members and more than 45,000 experts")
  - [Structure](/structure.html)
  - [Members](/about/members "The members of the International Organization for Standardization are 172 national standards bodies, each representing ISO in their country.")
  - [Strategy](/strategy2030.html "Making lives easier, safer and better. Our Strategy outlines our vision and our mission for the next 10 years and a set of goals and priorities to help us get there.")
- [News](/news.html "Keep up to date with the latest in standardization or browse our rich archives")
  - [Events](/events.html "Find out what's coming up and what you might have missed.")
- [Taking part](/developing-standards.html "Find out how the ISO process bring together global experts to create standards that are chosen the world over.")
  - [Who develops standards](/who-develops-standards.html "ISO has put together groups of experts that represent every sector imaginable from soaps to spacecraft, MP3 to coffee. In fact there are more than 250 technical committees. You can find out what they do here.")
  - [Deliverables](/deliverables-all.html "The different types of ISO publications.")
  - [Get involved](/get-involved.html)
  - [Climate action kit](/ClimateAction.html "The ISO Climate Action Kit is a collection of case studies from around the world on how standards can be effectively used as a tool for sustainability.")
  - [Resources](/resources.html "Resources to support the work of individuals involved in standards development. ")
- [Store](/store.html "Are you looking to buy International Standards, guidelines, collections and checklists? They're all right here, in the ISO Store.")
  - [Standards catalogue](/standards-catalogue/browse-by-ics.html)
  - [Publications and products](/publication-list.html "ISO publications give insights and guidance into specific applications and show how standards add value.")

- [ISO name and logo](/iso-name-and-logo.html)
- [Privacy Notice](/privacy.html)
- [Copyright](/copyright.html)
- [Cookie policy](/cookies.html)
- [Media kit](/media-kit.html)
- [Jobs](/working-with-iso.html)
- [FAQs](/frequently-asked-questions-faqs.html)
- [Help and support](/contact-iso.html)

## Sign up for email updates

Subscribe

**Almost done!**

You are only one step away from joining the ISO subscriber list. Please confirm your subscription by clicking on the email we've just sent to you. You will not be registered until you confirm your subscription. If you can't find the email, kindly check your spam folder and/or the promotions tab (if you use Gmail).

How your data will be used

Please see [ISO privacy notice](/privacy.html "privacy-and-copyright"). This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.

- [Linkedin](https://www.linkedin.com/company/isostandards "Linkedin")
- [Twitter](https://twitter.com/isostandards "Twitter")
- [Facebook](https://www.facebook.com/isostandards "Facebook")
- [Instagram](https://www.instagram.com/isostandards "Instagram")
- [YouTube](https://www.youtube.com/ISO "YouTube")
- [Flickr](https://www.flickr.com/photos/isostandards "Flickr")

Making lives **_easier_**, **_safer_** and **_better_**.

We are committed to ensuring that our website is accessible to everyone. If you have any questions or suggestions regarding the accessibility of this site, please [contact us](mailto:webmaster@iso.org?subject=Accessibility).

[© All Rights Reserved](#copyright) All ISO publications and materials are protected by copyright and are subject to the user’s acceptance of ISO’s conditions of copyright. Any use, including reproduction requires our written permission. All copyright requests should be addressed to [copyright@iso.org](mailto:copyright@iso.org).

[Scroll to top](#page-top "Scroll to top")

Powered by

#### Add to cart