Home/Compliance
iso-27001-2022

ISO 27001:2022. Security Controls

93 controls · cross-mapped to ATT&CK techniques
Translate between regulatory language and what attackers actually do. Each control maps to MITRE ATT&CK techniques; open a control to see those techniques and whether we hold detection coverage for them.
Audit answer: every control + the techniques it defends + what you can detect (exportable)
▤ Generate threat-informed coverage report
⇄ Self-assessment: pick what you have, see your coverage

Controls

80 shown of 93
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
family Organizational framework iso-27001-2022
A.6.1 medium
family People framework iso-27001-2022
family People framework iso-27001-2022
family People framework iso-27001-2022
family People framework iso-27001-2022
family People framework iso-27001-2022
family People framework iso-27001-2022
family People framework iso-27001-2022
family People framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Physical framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
A.8.15 medium
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
family Technological framework iso-27001-2022
Showing 1-80 of 93
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin