ISO/IEC 27001 · Information security
It requires assessing and treating information security risks and declaring the applicability of the Annex A controls.
- Sectors
- Technology · Financial services · Telecommunications
- Edition
- ISO/IEC 27001:2022
We use necessary technical cookies and measure only if you accept. Accept turns on our own measurement, Google Analytics and the Meta pixel; Reject keeps everything off, and you can change it at any time. See the details
This page is technical and training material: it does not publish a certification offer.
G-CERTI public standards catalogue · 02-09-2026
ISO/IEC 20243-1:2023 — Open Trusted Technology Provider Standard — Requirements and recommendations for mitigating maliciously tainted and counterfeit products. Edition 2, 2023.
Information page under review: technical and training material, with no certification offer.
It requires assessing and treating information security risks and declaring the applicability of the Annex A controls.
It requires a service management system that plans, delivers and improves the IT services agreed with the customer.
It requires a privacy information management system, with controls for controllers and processors of personal data.
It requires governing how the organization develops, provides or uses artificial intelligence, with assessed risks, Annex A controls and human oversight.
The catalogue publishes 45 records with their status; those with a certification offer state it on their own page.