Secure Controls Framework
Download The SCF
ISO 27001

What is ISO 27002?

Direct Answer

ISO/IEC 27002:2022 is the companion code of practice to ISO 27001. While ISO 27001 specifies what you must do (management system requirements), ISO 27002 provides guidance on how to implement the Annex A controls. ISO 27002 is not a certifiable standard - it is a reference for implementing controls. The 2022 update aligned ISO 27002 with the new 93-control Annex A structure.

Keep Exploring

Relevant Resources

References

Authoritative Sources