---
name: ISO/IEC 27001:2022
authority: iso
jurisdiction: International
type: standard
status: active
enacted: 2022-10-25
effective: 2022-10-25
official_url: https://iso.org/standard/27001
last_verified: 2026-07-21
---

## Timeline

| Milestone | Date | Notes |
|-----------|------|-------|
| Published | 2022-10-25 | ISO/IEC 27001:2022 released |

---

## Confidentiality and Access

| Property | Value |
|----------|-------|
| Obligation | access-control |
| Sections | ISO public overview |
| Status | active |
| Effective | 2022-10-25 |
| Verified | 2026-07-21 |
| Checked | 2026-07-21 |

### Requirements

| Requirement | Details |
|-------------|---------|
| Confidential access | Ensure only the right people can access information |
| Risk management | Manage risks to information handled by the organization |

### Talking Point

> "ISO/IEC 27001 frames confidentiality as ensuring that only the right people can access organizational information."

### Sources

- [ISO/IEC 27001:2022](https://iso.org/standard/27001)

---

## Information Integrity

| Property | Value |
|----------|-------|
| Obligation | information-integrity |
| Sections | ISO public overview |
| Status | active |
| Effective | 2022-10-25 |
| Verified | 2026-07-21 |
| Checked | 2026-07-21 |

### Requirements

| Requirement | Details |
|-------------|---------|
| Information integrity | Keep information reliably stored and protected from erasure or damage |
| Risk management | Use an ISMS to manage risks to information security |

### Talking Point

> "ISO/IEC 27001 treats information integrity as one of the three core information-security principles, alongside confidentiality and availability."

### Sources

- [ISO/IEC 27001:2022](https://iso.org/standard/27001)