Free Engineering Workbench calculator
ISO 27001:2022 Annex A readiness
Track implementation of the 93 Annex A controls by theme through a certification or surveillance cycle.
Governance, risk & complianceHow it's worked out
- Implemented share = controls implemented ÷ (93 − excluded). Theme share = implemented ÷ controls in theme
- Exclusions justified in the Statement of Applicability
NoteImplemented is not the same as effective. Certification also needs the clauses 4 to 10 management system, internal audit and management review.
Source: ISO/IEC 27001:2022 Annex A (93 controls in four themes)
Need help acting on this number?
VVnT SeQuor's ISO & Compliance Implementation practice helps teams turn this metric into a plan.