Corrected version (en) : 2022-03
This corrected version of ISO/IEC 27002:2022 incorporates the following corrections:
— non-functioning hyperlinks throughout the document have been restored;
— in the introductory table in subclause 5.22 and in Table A.1 (row 5.22), "#information_security_
assurance" has been moved from the column headed "Security domains" to the column headed
"Operational capabilities".

This document provides a reference set of generic information security controls including implementation guidance. This document is designed to be used by organizations:


a) within the context of an information security management system (ISMS) based on ISO/IEC27001;


b) for implementing information security controls based on internationally recognized best practices;


c) for developing organization-specific information security management guidelines