// Cybersecurity
ISO 27001 in 2026: What Changed and What Your Auditor Will Ask
The 2022 revision introduces 11 new controls. If your last audit was against the 2013 standard, here is what changes at your next surveillance audit.
If certified against ISO 27001:2013, your next surveillance audit will be assessed against the 2022 revision. The transition deadline passed October 2025.
The 2022 standard introduces 11 new controls: threat intelligence, cloud security, data masking, ICT readiness for business continuity. Your Statement of Applicability and evidence of implementation need updating.