Migration from
ISO 27001 2013
to ISO 27001 2022

The ISO 27001 2013 and ISO 27001 2022 differ primarily in the Annex A, which includes the different controls that are relevant and that shall be considered in the construction of the Statement of Applicability, as well as in the risk treatment process in order to reduce the inherent risk to a level accepted by the organization.

The deadline for the transition to the ISO 27001 2022 has been set to the 31st of October 2025, which means that organizations should hurry in order to consider the new set of controls and update their ISMS including their SoA (Statement of Applicability) as well as to develop new policies considering the new set of controls, that include Cloud Computing amongst other novelties that should be considered in 2025.

At CMI, we have tried to make it easy for you in order to know exactly what policies you should look at, what changes to the ISMS you should perform as well as which controls you should consider, and for this we will create a migration template in order to allow for a seamless, rapid and efficient transition.

Do you want to get your copy of this template, that will cost your business less than 20£? Reach out to us via email: contact@certifymyisms.com.