ISO Management Systems
Annex A
The list of reference controls in ISO/IEC 27001:2022. It contains 93 controls across four themes: 37 organisational, 8 people, 14 physical and 34 technological.
Why it matters: Annex A is a reference list, not a checklist to implement in full. Your risk assessment decides which apply.
Related terms
Questions about how this applies to you? Book a free 45 minute diagnostic.