Crosswalk
ISO/IEC 27002:2022
Where the corpus maps to ISO/IEC 27002:2022: Information security controls.
Canonical citation
- Standard ID
- ISO/IEC 27002
- Current version
- 2022
- Publication date
- 2022-02
- Topic
- Information security controls
- Upstream check location
- https://
www.iso.org/ standard/ 75652.html (opens in a new tab) - Last verified (UTC)
- 2026-09-25
Corpus citations, 32
Documents naming it in their framework alignment
Generated from each document's framework alignment list in the taxonomy, through the committed alias map.
- Access Control ProcedureSecurity
- Asset Inventory RegisterOperations
- Bring Your Own Device (BYOD) PolicySecurity
- Cross-Domain Incident Coordination ProcedureResilience
- Cryptographic Key Lifecycle Management FrameworkSecurity
- Cryptographic Key Operations ProcedureSecurity
- Data Classification and Handling StandardSecurity
- Data Loss Prevention StandardSecurity
- Data Retention ScheduleGovernance
- Developer Security RequirementsDev security
- DevOps Security RequirementsDev security
- Encryption and Key Management PolicySecurity
- Endpoint Hardening StandardSecurity
- Identity and Access Management PolicySecurity
- Identity Management ProcedureSecurity
- Information Security PolicySecurity
- Insider Risk Programme FrameworkSecurity
- IT Disaster Recovery PlanResilience
- IT Onboarding and Offboarding ProcedureSecurity
- Key Escrow and Recovery ProcedureSecurity
- Logging and Monitoring StandardSecurity
- Records Retention and Destruction StandardGovernance
- Remote Working Security StandardSecurity
- Secure Code Review ProcedureDev security
- Secure Development and Engineering PolicyDev security
- Security Baseline and Standards ReferenceDev security
- Security Disciplinary Process ProcedureSecurity
- Security Monitoring and Alert Management ProcedureOperations
- Software Composition Analysis StandardDev security
- Software Evaluation, Acceptance and Lifecycle Management StandardDev security
- Threat Intelligence and SIEM Operations ProcedureOperations
- Whistleblower and Incident Reporting ProcedureGovernance
Note
What this mapping is
From the GRC Library Compliance Alignment Matrix: citations are indicative, not exhaustive (the representative-citation convention), and no entry constitutes a certification, attestation, or legal opinion.
From the Reverse Framework Control Crosswalk Matrix: coverage is partial, and external control identifiers and clause numbers are referenced for navigation only; the library does not reproduce third-party control text.
From the Cross-Framework Alignment Matrix: the alignment is not an official mapping, certification claim, legal opinion, or reproduction of third-party framework content.
The standards, laws, frameworks, and programmes in the canonical citations register, mapped here or not, are listed with their current editions on the Standards & frameworks page, generated from that register.