{"id":5619,"date":"2022-11-18T12:28:52","date_gmt":"2022-11-18T02:28:52","guid":{"rendered":"http:\/\/anitechgroup.com\/au\/?p=5619"},"modified":"2023-12-18T11:26:53","modified_gmt":"2023-12-18T01:26:53","slug":"recent-changes-to-iso-27001-focus-on-information-security-for-cloud","status":"publish","type":"post","link":"https:\/\/anitechgroup.com\/au\/blog\/recent-changes-to-iso-27001-focus-on-information-security-for-cloud\/","title":{"rendered":"Recent Changes to ISO 27001 Focus on Information Security for Cloud"},"content":{"rendered":"

On October 25, 2022, the newest version of the ISO\/IEC 27001:2022 standard was released. The recent changes to ISO 27001 comprise a substantial change to Annex A, a change in its title, and some minor updates to the clauses. The changes come in the wake of the increasing cyber-attacks and information security risks faced by businesses in Australia and the world.<\/p>\n

The standard outlines the guidelines for developing, implementing, maintaining, and constantly improving an information security management system. It also comprises requirements for evaluating and treating information security risks that are customised as per the needs of an organisation.<\/p>\n

Hence, the change in the name to – ISO\/IEC 27001, \u2018Information security<\/a>, cybersecurity, and privacy protection – Information security management systems – Requirements.\u2019<\/p>\n

The most recent version of ISO\/IEC 27002 was published in early 2022, and its most recent changes have also impacted ISO\/IEC 27001.<\/p>\n

Importance of ISO 27001 as per ISO<\/h2>\n

ISO 27001<\/a> is an international standard for information security management<\/a>. It demonstrates the resilience of your security posture to potential clients and prospects worldwide.<\/p>\n

Companies that demonstrate cyber resilience via confident vulnerability rapidly rise as industry giants, setting the bar for their ecosystem.<\/p>\n

The systematic approach of ISO\/IEC 27001 signifies that the whole Company, not just IT, is protected. Everyone benefits, including people, processes, and technology.<\/p>\n

When an Australian business uses ISO\/IEC 27001, it shows stakeholders and customers that it is dedicated to information security and safety. It’s an excellent way to market your Company, rejoice in your accomplishments, and show your reliability.<\/p>\n

ISO is constantly reviewing and updating its standards, which is extremely crucial given the fast progressions in cyber threats and the growing acceptance that robust cybersecurity security requires a broader cyber resilience methodology.<\/p>\n

Top Changes to ISO 27001<\/h2>\n

Below given are the significant changes in the inclusions, exclusions, and structure of ISO 27001 as per the latest update. We have explained each change in brief.<\/p>\n

New Controls included<\/h3>\n

ISO\/IEC 27001:2022 has also included 11 new controls to its Annex A:<\/p>\n

    \n
  1. Threat intelligence<\/li>\n
  2. Information security for the use of cloud services<\/li>\n
  3. ICT readiness for business continuity<\/li>\n
  4. Physical security monitoring<\/li>\n
  5. Configuration management<\/li>\n
  6. Information deletion<\/li>\n
  7. Data masking<\/li>\n
  8. Data leakage prevention<\/li>\n
  9. Monitoring activities<\/li>\n
  10. Web filtering<\/li>\n
  11. Secure coding<\/li>\n<\/ol>\n

    Information security for the use of cloud services<\/h4>\n

    This is the main highlight of the recent changes in ISO 27001:2022 introduced by ISO.<\/p>\n

    With Australian and global organisations shifting their digital base and servers to the cloud networks, and remote formats since the Covid-19 lockdown, cybercriminals have also found another space to exploit and hack. It is called cloud jacking which is increasing due to a lack of timely security detects and complex cloud frameworks.<\/p>\n

    Yes, it is true that the popular cloud networks like Microsoft 365, Google Workplace and Zoom etc., have made from anywhere quite hassle-free, but many organisations have overlooked their security, and hence these have become one of the key targets of hackers.<\/p>\n

    Also, given the complex frameworks of the cloud networks, they need a continual information security check to update the system and spot any vulnerability in it at regular intervals.<\/p>\n

    Hence, securing cloud networks is of utmost importance to secure businesses, their sensitive information, and employees.<\/p>\n

    Employees form one of the key gateways for cybercriminals to hack cloud networks.<\/p>\n

    Hence, ISO has noted the importance of offering robust security to the cloud networks with the introduction of this new control – Information security for the use of cloud services.<\/p>\n

    Suggestions for Cloud Security Checklists<\/h5>\n

    Here is our suggestion for Cloud Security Checklists:<\/p>\n