ISO and quality management

ISO 27001:2022 FDIS — Changes presented in August 2022

2026-09-28 06:15:22 | Lượt xem: 102 | ISO and quality management

In August 2022, ISO was completing the remaining work before publishing ISO 27001:2022, then at the Final Draft International Standard (FDIS) stage. The following changes relate to that draft stage.

2022 update. Check the applicable edition before implementation.

Main changes presented for ISO 27001:2022

The August 2022 FDIS overview identified the main requirements in clauses 4–10 as unchanged.
It stated that the update focused on the information security controls listed in Annex A.
The number of controls decreased from 114 to 93.
The controls were grouped into four sections rather than the previous 14.
There were 11 new controls; existing controls were retained or consolidated rather than simply deleted.

August 2022 FDIS overview: clauses 4–10 described as unchanged; Annex A controls updated; 114 controls reduced to 93; four groups replacing 14; 11 new controls, with many existing controls merged.

The 93 controls were distributed across four themes:

Clause 5 — Organisational controls, where not otherwise classified: 37 controls.
Clause 6 — People controls, relating to people: 8 controls.
Clause 7 — Physical controls, relating to physical objects: 14 controls.
Clause 8 — Technological controls, relating to technology: 34 controls.