GAP analysis ISO 27001:2017 vs ISO 27001:2022

Published December 2022

On 25 October 2022, the ISO/IEC 27001:2022 was released and brings some changes compared to the old version ISO/IEC 27001/2017. All certificates issued to the previous version of the information security management system standard (ISO/IEC 27001:2013) will have an expiration date of 31 October 2025.

We have composed this gap analysis to provide you with a simple overview of all the differences between the 2017 and 2022 versions.