Fortis Consulting

So... it’s now official 🔔 Yesterday, on October 25, 2022 the world’s leading standard, , has been updated and officially the new ISO/IEC 27001:2022 was published. 📌

As we shared before, the changes are moderate, however they still require our attention.

And as always, we at Fortis Consulting are here to support you and your company either in obtaining ISO 27001:2022 or handling and keeping on track previously obtained ISO 27001:2013 🔎

So today’s question is... 💡

Which of the below more accurately describes your company state 🤔 ?

🔹We have been granted with ISO 27001:2013
🔹We are planning to implement and obtain ISO 27001:2022
🔹We are still in hesitations do we need ISO 27001 or no


If you have a question, contact us via ☎️ +374 60 87 00 77 or [email protected] .

📍 October is declared as a .

This year’s the campaign theme is “See Yourself in Cyber”, demonstrates that while may seem like a complex subject, ultimately, it’s really all about . 🔐

📣 Here is 4 key action steps that we do recommend to everyone take:

🔹Think Before You Click: Recognize and Report Phishing: If a link looks a little off, think before you click. It could be an attempt to get sensitive information or install malware.
🔹Update Your Software: Don't delay - If you see a software update notification, act promptly. Better yet, turn on automatic updates.
🔹Use Strong Passwords: Use passwords that are long, unique, and randomly generated. Use password managers to generate and remember different, complex passwords for each of your accounts. A passwords manager will encrypt passwords securing them for you!
🔹Enable Multi-Factor Authentication (MFA): You need more than a password to protect your online accounts, and enabling MFA makes you significantly less likely to get hacked.

As a reminder that we at Fortis Consulting provides wide range of services related to issues, starting from , and up to Implementation.

If you have a questions, contact us via ☎️ +374 60 87 00 77 or [email protected].

📣The revised version of ISO27001 is expected to be published by October 2022.​

Let's clarify some actual question in regards of the upcoming update💬:​

What will be updated in general❓​
Security controls listed in ISO 27001 Annex A will be updated fully aligned with changes in ISO 27002:2022 (updated in February 2022).​
​
🔹Number of the controls will be decreased from 114 to 93 ​
🔹The controls will be placed in 4 sections instead of previous 14.​
🔹11 new controls will be introduced. However, none of the controls were deleted, mostly many controls were just merged.​
🔹Main part of ISO 27001, i.e., clauses 4 to 10, will not be changed.​
​
What do we need to change in our documentation if we already implemented ISO 27001❓​
​
Mostly you will be involved in reorganizing controls and changing documentations, since no changes in technology will be introduced.​
The updates of Risk treatment process, Statement of Applicability and existing Policies and Procedures will be the main approach towards meeting requirements of the upcoming ISO27001 updated.​
​
What about transition Period❓​
Transition period will probably be 2 years starting from the date of official ISO 27001:2022 update.​
​
If there are still questions you need to clarify, contact us via 📩 📞 https://fortis.am/contact-us/
​
​