[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Foverview":3},{"item":4,"lessons":16,"controls":54,"related":82},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","overview","ISO\u002FIEC 27001","ISO\u002FIEC 27001:2022 Information security, cybersecurity and privacy protection: Information security management systems: Requirements",9,"International Organization for Standardization (ISO) and IEC","**What it covers.** The international standard for an information security management system. Clauses 4 to 10 set requirements for context, leadership, planning, support, operation, performance evaluation and improvement. Annex A lists 93 reference controls in four themes, against which a Statement of Applicability is produced.\n\n**In practice.** Applying it well means defining a meaningful scope, running a repeatable risk assessment, selecting controls based on risk and documenting the choices in a Statement of Applicability. Management reviews performance, internal audits test the system and nonconformities lead to corrective action. Certification audits examine both the management system and evidence that controls operate, for example vulnerability management under A.8.8.\n\n**Common gaps.** Common gaps are a narrow scope chosen for convenience, a risk assessment disconnected from real decisions and controls documented but not operated. Organisations certified to the 2013 edition had to transition to 2022 by October 2025.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50],{"slug":19,"title":20,"published_at":21},"ai-accelerated-exploitation-demands-proactive-zero-day-defense","AI-Accelerated Exploitation Demands Proactive Zero-Day Defense","2026-09-15T14:20:38.545+00:00",{"slug":23,"title":24,"published_at":25},"critical-cisco-citrix-fortinet-flaws-actively-exploited-federal-patch-deadline-issued","Critical Cisco, Citrix & Fortinet Flaws Actively Exploited — Federal Patch Deadline Issued","2026-09-10T12:21:02.522+00:00",{"slug":27,"title":28,"published_at":29},"shieldcrash-zero-day-bypasses-defender-patches-grants-system-access","ShieldCrash Zero-Day Bypasses Defender Patches, Grants SYSTEM Access","2026-09-09T08:20:35.892+00:00",{"slug":31,"title":32,"published_at":33},"digicert-breach-exposes-code-signing-certificate-theft-via-spear-phishing-rat","DigiCert Breach Exposes Code-Signing Certificate Theft via Spear-Phishing RAT","2026-07-17T18:21:01.282+00:00",{"slug":35,"title":36,"published_at":37},"critical-fortinet-flaws-actively-exploited-immediate-patching-required","Critical Fortinet Flaws Actively Exploited — Immediate Patching Required","2026-07-17T08:20:57.88+00:00",{"slug":39,"title":40,"published_at":41},"microsoft-defender-zero-day-grants-system-privileges-via-race-condition","Microsoft Defender Zero-Day Grants SYSTEM Privileges via Race Condition","2026-07-09T06:20:16.681+00:00",{"slug":43,"title":44,"published_at":45},"critical-cursor-ai-ide-flaws-enable-os-level-remote-code-execution","Critical Cursor AI IDE Flaws Enable OS-Level Remote Code Execution","2026-07-03T08:20:25.769+00:00",{"slug":47,"title":48,"published_at":49},"adobe-patches-7-maximum-severity-flaws-in-coldfusion-and-campaign-classic","Adobe Patches 7 Maximum-Severity Flaws in ColdFusion and Campaign Classic","2026-07-01T16:20:39.075+00:00",{"slug":51,"title":52,"published_at":53},"cnil-fines-iqvia-5m-for-inadequate-health-data-pseudonymisation","CNIL Fines IQVIA €5M for Inadequate Health Data Pseudonymisation","2026-05-29T12:20:23.514+00:00",[55,60,65,69,74,78],{"slug":56,"name":57,"problem":58,"stories":59},"patch-management","Automated patch management","Known holes get closed in days, not months.",7,{"slug":61,"name":62,"problem":63,"stories":64},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",6,{"slug":66,"name":67,"problem":68,"stories":64},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":70,"name":71,"problem":72,"stories":73},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",1,{"slug":75,"name":76,"problem":77,"stories":73},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",{"slug":79,"name":80,"problem":81,"stories":73},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",[83,87,92,97,102,107,112,116],{"family":84,"item":6,"code":85,"title":85,"together":86},"itil","ITIL",8,{"family":88,"item":89,"code":90,"title":91,"together":59},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",{"family":93,"item":94,"code":95,"title":96,"together":59},"cis","7","Control 7","Continuous Vulnerability Management",{"family":98,"item":99,"code":100,"title":101,"together":64},"nist-800-53","si-2","SI-2","Flaw Remediation",{"family":93,"item":103,"code":104,"title":105,"together":106},"13","Control 13","Network Monitoring and Defense",4,{"family":93,"item":108,"code":109,"title":110,"together":111},"12","Control 12","Network Infrastructure Management",3,{"family":98,"item":113,"code":114,"title":115,"together":111},"ac-6","AC-6","Least Privilege",{"family":98,"item":117,"code":118,"title":119,"together":111},"ra-5","RA-5","Vulnerability Monitoring and Scanning"]