ISO/IEC 27001:2022 Transition

A narrow, practical course

ISO/IEC 27001:2022 aligned with the 2022 revision of ISO/IEC 27002, and most of the material change sits in Annex A rather than the main body clauses. This course does not re-teach ISO/IEC 27001 from scratch; it assumes you already have it, and focuses on the delta.

Certification bodies expect a transition plan, not just awareness

Existing ISO/IEC 27001:2013 certificates have a transition deadline set by the accreditation body. This course gives you what you need to run a gap analysis, update the statement of applicability, and walk into a transition audit prepared rather than hoping the differences don't come up.

What you will learn

• Explain the major changes between ISO/IEC 27001:2013 and ISO/IEC 27001:2022
• Interpret the restructured Annex A control set and new terminology
• Plan the transition of an existing ISMS to the 2022 edition
• Identify documentation and evidence updates a certification body will expect

Course content

1. 1. What changed and why

   Alignment with the revised ISO/IEC 27002, and why the standard title itself changed.

2. 2. Clause changes

   Minor but material changes across the main body clauses.

3. 3. Annex A control changes

   The restructured, consolidated control set and how it maps back to the 2013 controls.

4. 4. Planning the transition

   Gap analysis, documentation updates and preparing for a transition audit.

Exam and certification

Closed-book written exam delivered online through PECB Exams.

Your fee includes your first exam attempt and one free retake within 12 months. After passing, you can apply for the relevant PECB credential.