Clarification about controls of ISO 27001:2022
IRCA circulars and publications refer to controls of this standard with prefix “A.”;e.g. A.5.34, A.7.1 etc. This was the practice in ISO 27001:2013 also.
The 2022 release of the standard itself refers to them without such prefix. I would like to refer them with the prefix as otherwise controls like 7.1, 8.2. 5.3 etc may be confused with corresponding clauses.
Is there any other logic in favour of referring the controls with prefix “A.”? While browsing the internet we see that both styles are being followed.
Assign topic to the user
Please select user.
Feb 22, 2023