Standards controls

Answer: In the ISO 27001 series of standards there is no standard with 27 groups of controls. ISO 27017 (for cloud services security), ISO 27018 (for privacy protection), and ISO 27019 (for energy utility industry) have additional controls that can be used with ISO 27001 Annex A controls, but they do not compose additional groups of controls.

This article will provide you further explanation about ISO 27017 and ISO 27018:
- ISO 27001 vs. ISO 27017 – Information security controls for cloud services https://advisera.com/27001academy/blog/2015/11/30/iso-27001-vs-iso-27017-information-security-controls-for-cloud-services/
- ISO 27001 vs. ISO 27018 – Standard for protecting privacy in the cloud https://advisera.com/27001academy/blog/2015/11/16/iso-27001-vs-iso-27018-standard-for-protecting-privacy-in-the-cloud/