Frameworks / Security / Profiles
ISO/IEC 27001 Information Security
Included in Information Security · Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018
Full clause and Annex A coverage of ISO/IEC 27001:2022, structured for certification readiness and internal audit.
The standard tells you what is required; the framework tells you how to do it, whether you've done enough to certify, and how to keep getting better.
Included in
Information Security
Information Security is anchored on ISO/IEC 27001: every certifiable clause is covered, and its Certification view tells you whether you can certify or comply.
Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018
A profile isn't sold on its own: it comes with the topic framework, in the Core and Professional editions. In APEX, it is the Certification view filtered to ISO/IEC 27001.
ISO/IEC 27001 also appears in
- Payment Card Security, as a Secondary standard
- Unified Governance Framework, as a certification profile
Need to govern against ISO/IEC 27001?
Tell us where your programme is today and we'll point you to the right framework and edition.
Enquire about Information SecurityStandards are referenced by clause, not reproduced. Names of standards and laws are trademarks of their owners; DP Frameworks is not affiliated with or endorsed by any standards body or regulator. Frameworks support governance and readiness; they are not legal advice or a regulatory submission.