A10 Communications and Cryptographic operations management techniques A11 Access control Physical security of the organization’s sites and equipment A12 Information systems Operational security acquisition, development, and maintenance A13 Information security Secure incident management communications and data transfer A14 Business continuity Secure acquisition, management development and support for information systems A15 Compliance Security for suppliers and third parties A16 N/A Incident security incident management A17 N/A Information aspects of business continuity A18 N/A Compliance Controls that have been removed include: A.6.1.1 Management commitment to information security A.6.1.2 Information security coordination A.6.1.4 Authorization process for information processing facilities A.6.2.1 Identification of risks related to external parties A.6.2.2 Addressing security when dealing with customers A.10.2.1 Service delivery A.10.7.4 Security of system documentation A.10.10.2 Monitoring system use A.10.10.5 Fault logging A.11.4.2 User authentication for external connections A.11.4.3 Equipment identification A.11.4.4 Remote diagnostic and configuration port protection A.11.4.6 Network connection control
A10 Communications and operations management Cryptographic techniques A11 Access control Physical security of the organization’s sites and equipment A12 Information systems acquisition, development, and maintenance Operational security A13 Information security incident management Secure communications and data transfer A14 Business continuity management Secure acquisition, development and support for information systems A15 Compliance Security for suppliers and third parties A16 N/A Incident security incident management A17 N/A Information aspects of business continuity A18 N/A Compliance Controls that have been removed include: A.6.1.1 Management commitment to information security A.6.1.2 Information security coordination A.6.1.4 Authorization process for information processing facilities A.6.2.1 Identification of risks related to external parties A.6.2.2 Addressing security when dealing with customers A.10.2.1 Service delivery A.10.7.4 Security of system documentation A.10.10.2 Monitoring system use A.10.10.5 Fault logging A.11.4.2 User authentication for external connections A.11.4.3 Equipment identification A.11.4.4 Remote diagnostic and configuration port protection A.11.4.6 Network connection control
Migrating-ISMS-from-ISO-2005-2013-guide-by-A-lign.-Protected..docx