ISO (the International Organization for Standardization) and IEC
(the International Electrotechnical Commission) have ISO 27000
series which provides requirements for an information security
management system (ISMS). They have revised the new information
security standard ISO 27002:2022 from the earlier ISO 27002:2013. In
the new standard, a new structure and several new controls have
been introduced.
What's New?
In the new standard, the number of controls have decreased to 93
as a result of removal of few controls, merger of some controls,
and addition of 11 new controls.
Control 5.7 - Threat Intelligence
A notable addition to the new standard is Control 5.7, which
refers to Threat Intelligence. This covers the need for
organizations to collect, analyze, and produce threat intelligence
relating to information security threats. In today's
environment of an ever-changing threat landscape, cyber threat
intelligence allows firms to take preventative measures
