ISO/IEC 27001:2022 Information security, cybersecurity, and privacy protection — Information security management systems

This document has been prepared to provide requirements for establishing, implementing, maintaining
and continually improving an information security management system. The adoption of an
information security management system is a strategic decision for an organization. The establishment
and implementation of an organization’s information security management system is influenced by the
organization’s needs and objectives, security requirements, the organizational processes used and the
size and structure of the organization. All of these influencing factors are expected to change over time.
For amendment 1 2024-02:
AMENDMENT 1: Climate action changes

4.1
Add the following sentence at the end of the subclause:

The organization shall determine whether climate change is a relevant issue.

4.2
Add the following note at the end of the subclause:
NOTE 2 Relevant interested parties can have requirements related to climate change.