The international standard for an information security management system (ISMS), certified by accredited bodies.

Who does ISO 27001 apply to?

Any organisation that chooses to certify; often required by customers or in public tenders

What is the current version of ISO 27001?

ISO/IEC 27001:2022 with Amendment 1:2024 (climate action). Certificates to the 2013 edition expired on 31 October 2025

Who is responsible for ISO 27001?

ISO and IEC (joint committee JTC 1/SC 27)

Framework

ISO 27001

Information security management systems

4 stories in the last 90 daysLatest story 1 day ago

What is ISO 27001?: The international standard for an information security management system (ISMS), certified by accredited bodies.
Who does ISO 27001 apply to?: Any organisation that chooses to certify; often required by customers or in public tenders
What is the current version of ISO 27001?: ISO/IEC 27001:2022 with Amendment 1:2024 (climate action). Certificates to the 2013 edition expired on 31 October 2025
Who is responsible for ISO 27001?: ISO and IEC (joint committee JTC 1/SC 27)

Official text: ISO: ISO/IEC 27001

ISO 27001Guidance documentUnited Kingdom1 day ago

CREST publishes framework to boost financial cyber resilience

CREST released a whole‑ecosystem framework aimed at strengthening cyber‑resilience practices across banks, insurers and market infrastructure providers.

1 source · trade press

ISO 27001Industry news4 days ago
Cloud Security Alliance launches STAR for AI Level 2 to strengthen AI governance
The Cloud Security Alliance announced STAR for AI Level 2, enabling firms to extend existing certifications into the artificial‑intelligence domain.
1 source · trade press
ISO 27001Guidance document15 days ago
NCSC issues post-quantum TLS configuration guidance
The UK National Cyber Security Centre released recommendations for adding post‑quantum cryptography to TLS configurations, urging organisations to start migration now.
1 source · official
ISO 27001Guidance document1 month ago
NCSC urges UK organisations to mitigate exploited Citrix NetScaler vulnerabilities
The UK National Cyber Security Centre warned that two Citrix NetScaler ADC and Gateway flaws are being actively exploited and called for immediate remediation.
1 source · official
ISO 27001Rule change2 years ago
ISO publishes 2022 version of ISO/IEC 27001, ending 2013 audits by 30 april 2024
ISO/IEC 27001:2022 replaces the 2013 edition; audits to the old standard end 30 Apr 2024 and all 2013 certificates expire on 31 Oct 2025.
1 source · trade press