To give it its full title, ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements’ is an international standard which was published by the International Organisation for Standardisation (ISO). The purpose of the Standard is provide the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS) within the context of your organisation. This is the Standard organisations can certify against.
The current version of the Standard replaced the 2013 version on 25 October 2022 and is applicable to all organisations, irrespective of type, size or sector.
Thank you for a very informative overview of the components in the revised Standard.
Thinking about ISO 27001 but unsure how your project should take shape?
We offer a free, no‑commitment call to help you clarify your certification pathway, understand the standard in the context of your business.
Find out more
related BLog
How do You Identify and Then Manage Your ISMS Scope?
Published on
28 Aug
2026
When managing the security of your organisation’s information assets, you will need to consider the scope of what you are doing.
Read more
Information Security
Published on
14/8/2026
ISO 27001 Clause 9.1: Monitoring, Measurement, Analysis and Evaluation ExplainedURM’s blog explores ISO 27001 Clause 9.1, what it requires and practical guidance on how to implement this Clause in full conformance with the Standard.
Read more
Information Security
Published on
7/8/2026
5 Must-Dos of Effective ISO 27001 Risk ManagementURM’s blog explores five key actions organisations can take to strengthen their ISO 27001 information risk management processes.
Read more
Information Security
Published on
7/8/2026
The Fundamentals of Risk Management in ISO 27001URM’s blog explains the risk management requirements in ISO 27001, including identifying ISMS risk, risk assessment and treatment, documentation and more
Read more
"
I am pleased to recognise the work of the URM internal auditor we have worked. Throughout all the audits carried out, he has consistently demonstrated professionalism, diligence, and a commitment to excellence in every task undertaken. Thanks to his efforts, we have achieved a very successful first stage ISO 27001:2022 certification audit, with zero findings noted, which has positioned us on track for the second stage audit and for long-term success.
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.