The 93 ISO 27001:2022 Controls in 4 Themes: Organizational, People, Physical, Technological

Four Themes

Spotlight Controls (New / High-Search)

• A.5.7 Threat intelligence
• A.8.9 Configuration management
• A.8.15 Logging
• A.8.16 Monitoring activities

Frequently Asked Questions

How many Annex A controls does ISO 27001:2022 have?

93 controls in four themes, aligned with ISO/IEC 27002:2022.

What are the four theme counts?

Organizational 37 (A.5.1–A.5.37), People 8 (A.6.1–A.6.8), Physical 14 (A.7.1–A.7.14), Technological 34 (A.8.1–A.8.34).

Must every control be implemented?

You must produce a Statement of Applicability (6.1.3 d). Controls may be excluded with justification; necessary controls from Annex A must not be omitted inadvertently.

Related ISO 27001 Resources

ISO 27001 hub · 93 controls · SoA · CSA