ISO/IEC 27001:2022

ISO/IEC 27001:2022 is a globally recognised security framework jointly developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It assesses an organisation's ability to protect its information assets by requiring it to build, maintain, and continuously improve an Information Security Management System (ISMS).

The 2022 revision outlines a comprehensive set of security controls across four domains — covering areas such as access control, cryptography, physical security, and incident management. It promotes a culture of continual improvement, with regular monitoring, performance evaluation, and periodic reviews to help organisations adapt to evolving threats. Certification is granted only after a successful independent audit by an accredited body. As of the ISO Survey 2022, over 70,000 certificates have been issued across 150 countries and all economic sectors — making it one of the most widely adopted information security standards in the world.