View the ultimate certification guide to: ISO 27002:2022 5.8 Information security in project management ISO 27002 5.9 Inventory of information and other associated assets – CHANGE Purpose: To ensure information security risks related to projects and deliverables are effectively addressed in project management throughout the project life cycle. View the ultimate certification guide to: ISO 27002:2022 5.7 Threat intelligence ISO 27002 5.8 Information security in project management Purpose: To provide awareness of the organisations threat environment so that the appropriate mitigation actions can be taken.

View the ultimate certification guide to: ISO 27002:2022 5.6 Contact with special interest groups ISO 27002 5.7 Threat Intelligence – NEW Purpose: To ensure appropriate flow of information takes place with respect to information security. View the ultimate certification guide to: ISO 27002:2022 5.5 Contact with authorities ISO 27002 5.6 Contact with special interest groups

Purpose: The organisation should establish and maintain contact with relevant authorities. View the ultimate certification guide to: ISO 27002:2022 5.4 Management responsibilities ISO 27002 5.5 Contact with authorities

Purpose: Management should require all personnel to apply information security in accordance with the established information security policy, topic-specific policies and procedures of the organisation View the ultimate certification guide to: ISO 27002:2022 5.3 Segregation of duties ISO 27002 5.4 Management Responsibilities Purpose: To reduce the risk of fraud, error and bypassing of information security controls. View the ultimate certification guide to: ISO 27002:2022 5.2 Information security roles and responsibilities ISO 27002 5.3 Segregation of Duties Purpose: Annex A 5.2 is a preventive control that ensures a defined, approved and understood structure is in place for the implementation and operation of the information security management system. View the ultimate certification guide to: ISO 27002:2022 5.1 Policies for information security ISO 27002 5.2 Information security roles and responsibilities Purpose: Annex A 5.1 is a preventive control that ensures the suitability, adequacy and effectiveness of managements direction and support for information security. ISO 27002 5.1 Policies for Information Security

Iso 27002 controls checklist