Professional Documents
Culture Documents
MSECB ISO IEC 27002 Mapping
MSECB ISO IEC 27002 Mapping
ISO/IEC 27002:2022
Controls
03 Merged controls
57 controls from the 2013 version,
have been merged into 24 new
controls.
05 Renamed controls
23 controls have changed their
names. However, their purpose is the
same as in the previous 2013 version.
15.2.1 Monitoring and review of supplier services 5.22 Monitoring, review and change
15.2.2 Managing changes to supplier services management of supplier services
18.2.2 Compliance with security policies and 5.36 Compliance with policies, rules and
standards standards for information security
18.2.3 Technical compliance review
Renamed controls
23 controls have changed their names. However, their purpose is the same as
in the previous 2013 version.
15.1.1 Information security policy for supplier 5.19 Information security in supplier
relationships relationships
11.2.9 Clear desk and clear screen policy 7.7 Clear desk and clear screen
9.4.5 Access control to program source code 8.4 Access to source code
6.1.1 Information security roles and 5.2 Information security roles and
responsibilities responsibilities
6.1.4 Contact with special interest groups 5.6 Contact with special interest groups
16.1.6 Learning from information security 5.27 Learning from information security
incidents incidents
7.1.2 Terms and conditions of employment 6.2 Terms and conditions of employment
11.1.3 Securing offices, rooms and facilities 7.3 Securing offices, rooms and facilities
11.1.4 Protecting against external and 7.5 Protecting against external and
environmental threats environmental threats
11.2.1 Equipment siting and protection 7.8 Equipment siting and protection
11.2.7 Secure disposal or re-use of equipment 7.14 Secure disposal or re-use of equipment
9.4.4 Use of privileged utility programs 8.18 Use of privileged utility programs
[email protected]
www.msecb.com