ISO Management Systems
Annex A
The list of reference controls in ISO/IEC 27001:2022. It contains 93 controls across four themes: 37 organisational, 8 people, 14 physical and 34 technological.
Why it matters: Annex A is a reference list, not a checklist to implement in full. Your risk assessment decides which apply.
Related Goldline services: free Statement of Applicability review and ISO 27001 readiness assessment.
Related terms
Next step: Free Statement of Applicability review →
Questions about how this applies to you? Book a free 45 minute diagnostic.