Annex A and the Statement of Applicability
Annex A is a reference set of information security controls. The organization uses it to make sure it has not overlooked relevant controls when treating risks.
Overview & attributes
ISO27002 domain with 8 resources grouped for implementation and audit work.
Domain guide
What this domain covers
ISO 27002 orientation, control attributes, and evidence-oriented interpretation notes.
8 resources
Guide + resources
Grouped resources
Guide notes
Implementation context, reference notes, and explanatory material.
Annex A Controls MOC
Research note.
ISO 27001 Clauses 4-10 vs Annex A
1. Clauses 4-10 — mandatory ISMS management-system requirements. 2. Annex A controls — a reference set of information security controls used for risk treatment and the Statement...
ISO 27002 Annex A Control Interpretation Map
This map separates the ISO/IEC 27002 interpretation layer from the ISO/IEC 27001 requirement layer.
ISO 27002 Control Attributes Evidence Map
This note explains how ISO/IEC 27002 control attributes should be used in this KB.
ISO 27002 Knowledge Base
ISO/IEC 27002 provides guidance for information security controls. In this KB, it supports interpretation of ISO/IEC 27001 Annex A controls, evidence expectations, implementatio...
ISO27002 Control Attributes
A control is the actual safeguard. An attribute is a label describing the safeguard.
Exam prep
Study notes and distinction cues for certification preparation.
EXAM-003 - ISO 27002 Control Attributes
ISO/IEC 27002 attributes help categorize controls by properties such as control type, information security properties, cybersecurity concepts, operational capabilities, and secu...
Deep links
Link to this domain with /research/iso27002/overview/ . Link directly to exact notes from any resource card above.