Mind maps / ISO 27001:2013
ISO 27001:2013 mind map
A mind map of ISO 27001:2013 clauses and controls, with reference links. Free to use and share. Open the image at full size, or print it at A3.
Archived map. ISO/IEC 27001:2013 was replaced by ISO/IEC 27001:2022, which reorganised Annex A into 93 controls. The clause structure here is still a useful study aid.
Reference
Links from the map
These are the sources and tools referenced in the ISO 27001:2013 mind map. Links marked offline pointed to projects that have since shut down or moved, so they are kept as text only.
| ISO 27001 Standard | iso.org/iso/home/store/catalogue_ics/catalogue_detail_ics.htm?csnumber=54534 |
|---|---|
| ISO 27002 Standard | iso.org/iso/home/store/catalogue_tc/catalogue_detail.htm?csnumber=54533 |
| ISO27k Forum ISO27k Toolkit | iso27001security.com/html/iso27k_toolkit.htmloffline |
| SANS ISO 17799 Checklist | sans.org/score/checklists/ISO_17799_2005.doc |
| EBIOS | adullact.net/projects/ebios2010 |
| openEBIOS | sourceforge.net/projects/openebios |
| Practical Threat Analysis | ptatechnologies.comoffline |
| Verinice SerNet | verinice.com/en |
| Guide to Implementing and Auditing of ISMS Controls | shop.bsigroup.com/ProductDetail/?pid=000000000030282631offline |
| SANS Security Policy Project | sans.org/security-resources/policies |
| Mapping of the two versions | slideshare.net/slideshow/mapping-of-iso-270012005-with-iso-270012013/26975587 |
| BSi ISO27001 Transition Guide | slideshare.net/BSIGroupThailand/bsi-isoiec27001-transition-guideoffline |
| More tools | rm-inv.enisa.europa.eu/toolsoffline |
