Global
ISO 27001
The international standard for an information security management system, with 93 Annex A controls.
Who it applies to
Any organisation, anywhere, that wants a certifiable security programme.
What it can cost
Lost deals, failed audits and penalties set by your regulator or contract.
- Current edition
- ISO/IEC 27001:2022
- Annex A
- 93 controls in 4 themes
- Certificate
- Three-year cycle with yearly surveillance audits
What ISO 27001 asks of you
- 01Organisational controls
- 02People controls
- 03Physical controls
- 04Technological controls
- 05Risk assessment and treatment
- 06Internal audit and management review
How orta covers ISO 27001
93 ISO 27001 requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Policies drafted from a conversation
orta interviews your team by voice or text, asks only what ISO 27001 needs, and drafts the policy set from the answers.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
What feeds it
- Continuous complianceA passing check counts in every framework that needs it.
- Cloud postureYour cloud accounts, checked. Your data, left where it is.
- Runtime detectionCatch the attack while it is happening.
- Kubernetes securityEvery cluster, explained.
- Risk managementRisk that moves with reality.
