ISO/IEC 27001:2022 + Amd 1:2024
International standard for information security management systems (ISMS) with comprehensive risk-based controls.
About ISO/IEC 27001:2022 + Amd 1:2024
International standard for information security management systems (ISMS) with comprehensive risk-based controls. This framework is part of tier 1 - cyber & data, designed for SMEs starting their compliance journey.
Authoritative current reference
ISO/IEC 27001:2022 + Amendment 1:2024
Authority: International Organization for Standardization (ISO)
ISO/IEC 27001:2022 remains published and has Amendment 1:2024 (Climate action changes). Preserve proprietary standard text; R3 should map only governed themes/control references.
TAP assessment content remains pinned to its governed release. Current-source metadata does not silently change historical questions or represent certification against a newer external version.
Estimated Time
Approximately 120 minutes to complete the full assessment
Self-Service Assessment
Complete guided assessments using governed, versioned question sets and recorded responses.
Automated Gap Analysis
Identify assessment gaps with severity ratings and prioritised remediation recommendations.
Evidence Vault
Securely store and organise compliance documentation, including evidence dates and expiry metadata where provided.
Expert Support
Access to TASK consultants for guidance, reviews, and remediation planning.
Assessment Reports
Generate governed PDF assessment reports for stakeholders where the selected plan and assessment state permit reporting.
Need enterprise deployment? Contact us
Other Frameworks in Tier 1
Cyber Essentials
UK government-backed scheme covering five key security controls to protect against common cyber threats.
UK GDPR
UK General Data Protection Regulation — data protection and privacy requirements for organisations handling personal data.
NIS2 Directive
EU Network and Information Security Directive — cybersecurity obligations for essential and important entities.