Webinar Date and Time: Tuesday 5 December 2023 at 12.30pm (AEDT)
The ISO/IEC 27002 standard, which serves as a reference for establishing controls for information risk management, has introduced significant changes in ISO/IEC 27001:2022. These changes reflect the concern of organisations globally around new risks that have emerged in a more digitised world, thus facilitating the continuation of your digital transformation plans and adoption of new cybersecurity strategies. Most likely your organisation will need to refresh the controls that have been adopted around your management system and information security best practices.
Key Takeaways:
The changes to ISO/IEC27001 and ISO/IEC 27002 in 2022 represents a leap forward in the effectiveness of Information Security Management Systems (ISMS). Quick and effective adoption of the latest global best practice is essential to ensure trust in your organisation’s ability to protect information. Aside from the name change there has been a consolidation of controls, 11 newly introduced control objectives and a shake-up to the broader control framework - marking major differences to the prior version (ISO/IEC 27001:2013).
Key Changes:
- Updated controls aligned with current business practices and associated threats
- New “attributes” to enable alignment with different risk management methodologies including global cybersecurity frameworks
- Simplified and streamlined grouping of controls
- Greater clarity on management requirements in line with ISO harmonized structure
Join us to gain insights into the changes, their reasons, and how to enhance the protection of your information assets while aligning with global cybersecurity frameworks. Benefit from practical insights shared by those who have prepared and completed audits against the new Standard.
About the Presenters and Host: