Skip to content

Commit 959bed4

Browse files
jonashirnerjonashirner
committed
ISO 27001:2022 mapping for InformationGathering
1 parent d97054c commit 959bed4

2 files changed

Lines changed: 42 additions & 29 deletions

File tree

‎src/assets/YAML/default/InformationGathering/Logging.yaml‎

Lines changed: 17 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -21,10 +21,11 @@ Information Gathering:
2121
samm2:
2222
- O-IM-1-A
2323
iso27001-2017:
24-
- not explicitly covered by ISO 27001 - too specific
24+
- Not explicitly covered by ISO 27001 - too specific
2525
- 12.4.1
2626
iso27001-2022:
27-
- ISO 27001:2022 mapping is missing
27+
- Not explicitly covered by ISO 27001 - too specific
28+
- 8.15
2829
isImplemented: false
2930
evidence: ""
3031
comments: ""
@@ -47,10 +48,11 @@ Information Gathering:
4748
samm2:
4849
- O-IM-1-A
4950
iso27001-2017:
50-
- not explicitly covered by ISO 27001 - too specific
51+
- Not explicitly covered by ISO 27001 - too specific
5152
- 12.4.1
5253
iso27001-2022:
53-
- ISO 27001:2022 mapping is missing
54+
- Not explicitly covered by ISO 27001 - too specific
55+
- 8.15
5456
isImplemented: false
5557
evidence: ""
5658
comments: ""
@@ -73,10 +75,11 @@ Information Gathering:
7375
samm2:
7476
- O-IM-2-A
7577
iso27001-2017:
76-
- not explicitly covered by ISO 27001 - too specific
78+
- Not explicitly covered by ISO 27001 - too specific
7779
- 12.4.1
7880
iso27001-2022:
79-
- ISO 27001:2022 mapping is missing
81+
- Not explicitly covered by ISO 27001 - too specific
82+
- 8.15
8083
isImplemented: false
8184
evidence: ""
8285
comments: ""
@@ -113,7 +116,7 @@ Information Gathering:
113116
iso27001-2017:
114117
- 12.4.1
115118
iso27001-2022:
116-
- ISO 27001:2022 mapping is missing
119+
- 8.15
117120
risk: |-
118121
<ul>
119122
<li>No track of security-relevant events makes it harder to analyze an incident.</li>
@@ -141,11 +144,13 @@ Information Gathering:
141144
samm2:
142145
- O-IM-1-A
143146
iso27001-2017:
144-
- not explicitly covered by ISO 27001 - too specific
147+
- Not explicitly covered by ISO 27001 - too specific
145148
- 12.4.1
146149
- 18.1.1
147150
iso27001-2022:
148-
- ISO 27001:2022 mapping is missing
151+
- Not explicitly covered by ISO 27001 - too specific
152+
- 8.15
153+
- 5.31
149154
isImplemented: false
150155
evidence: ""
151156
comments: ""
@@ -171,10 +176,11 @@ Information Gathering:
171176
samm2:
172177
- O-IM-1-A
173178
iso27001-2017:
174-
- not explicitly covered by ISO 27001 - too specific
179+
- Not explicitly covered by ISO 27001 - too specific
175180
- 12.4.1
176181
iso27001-2022:
177-
- ISO 27001:2022 mapping is missing
182+
- Not explicitly covered by ISO 27001 - too specific
183+
- 8.15
178184
isImplemented: false
179185
evidence: ""
180186
comments: ""

‎src/assets/YAML/default/InformationGathering/Monitoring.yaml‎

Lines changed: 25 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ Information Gathering:
2121
iso27001-2017:
2222
- 12.1.3
2323
iso27001-2022:
24-
- ISO 27001:2022 mapping is missing
24+
- 8.6
2525
isImplemented: false
2626
evidence: ""
2727
comments: ""
@@ -45,7 +45,7 @@ Information Gathering:
4545
iso27001-2017:
4646
- 12.6.1
4747
iso27001-2022:
48-
- ISO 27001:2022 mapping is missing
48+
- 8.8
4949
isImplemented: false
5050
evidence: ""
5151
comments: ""
@@ -68,7 +68,7 @@ Information Gathering:
6868
iso27001-2017:
6969
- 12.6.1
7070
iso27001-2022:
71-
- ISO 27001:2022 mapping is missing
71+
- 8.8
7272
isImplemented: false
7373
evidence: ""
7474
comments: ""
@@ -93,7 +93,9 @@ Information Gathering:
9393
- 16.1.4
9494
- 12.1.4
9595
iso27001-2022:
96-
- ISO 27001:2022 mapping is missing
96+
- 6.8
97+
- 5.25
98+
- 8.31
9799
isImplemented: false
98100
evidence: ""
99101
comments: ""
@@ -142,10 +144,11 @@ Information Gathering:
142144
samm2:
143145
- O-IM-1-A
144146
iso27001-2017:
145-
- not explicitly covered by ISO 27001 - too specific
147+
- Not explicitly covered by ISO 27001 - too specific
146148
- 12.1.3
147149
iso27001-2022:
148-
- ISO 27001:2022 mapping is missing
150+
- Not explicitly covered by ISO 27001 - too specific
151+
- 8.6
149152
isImplemented: false
150153
evidence: ""
151154
comments: ""
@@ -172,7 +175,8 @@ Information Gathering:
172175
- 12.4.1
173176
- 13.1.1
174177
iso27001-2022:
175-
- ISO 27001:2022 mapping is missing
178+
- 8.15
179+
- 8.20
176180
isImplemented: false
177181
evidence: ""
178182
comments: ""
@@ -190,10 +194,11 @@ Information Gathering:
190194
samm2:
191195
- O-IM-2-A
192196
iso27001-2017:
193-
- not explicitly covered by ISO 27001 - too specific
197+
- Not explicitly covered by ISO 27001 - too specific
194198
- 12.1.3
195199
iso27001-2022:
196-
- ISO 27001:2022 mapping is missing
200+
- Not explicitly covered by ISO 27001 - too specific
201+
- 8.6
197202
isImplemented: false
198203
evidence: ""
199204
comments: ""
@@ -240,7 +245,7 @@ Information Gathering:
240245
iso27001-2017:
241246
- 12.1.3
242247
iso27001-2022:
243-
- ISO 27001:2022 mapping is missing
248+
- 8.6
244249
isImplemented: false
245250
evidence: ""
246251
comments: ""
@@ -261,10 +266,11 @@ Information Gathering:
261266
samm2:
262267
- O-IM-2-A
263268
iso27001-2017:
264-
- not explicitly covered by ISO 27001 - too specific
269+
- Not explicitly covered by ISO 27001 - too specific
265270
- 16.1.5
266271
iso27001-2022:
267-
- ISO 27001:2022 mapping is missing
272+
- Not explicitly covered by ISO 27001 - too specific
273+
- 5.26
268274
isImplemented: false
269275
evidence: ""
270276
comments: ""
@@ -286,7 +292,7 @@ Information Gathering:
286292
iso27001-2017:
287293
- 12.4.1
288294
iso27001-2022:
289-
- ISO 27001:2022 mapping is missing
295+
- 8.15
290296
isImplemented: false
291297
evidence: ""
292298
comments: ""
@@ -309,7 +315,7 @@ Information Gathering:
309315
iso27001-2017:
310316
- 12.1.3
311317
iso27001-2022:
312-
- ISO 27001:2022 mapping is missing
318+
- 8.6
313319
isImplemented: false
314320
evidence: ""
315321
comments: ""
@@ -335,7 +341,7 @@ Information Gathering:
335341
iso27001-2017:
336342
- 12.1.3
337343
iso27001-2022:
338-
- ISO 27001:2022 mapping is missing
344+
- 8.6
339345
isImplemented: false
340346
evidence: ""
341347
comments: ""
@@ -357,10 +363,11 @@ Information Gathering:
357363
samm2:
358364
- I-DM-A 3
359365
iso27001-2017:
360-
- not explicitly covered by ISO 27001 - too specific
366+
- Not explicitly covered by ISO 27001 - too specific
361367
- 16.1.5
362368
iso27001-2022:
363-
- ISO 27001:2022 mapping is missing
369+
- Not explicitly covered by ISO 27001 - too specific
370+
- 5.26
364371
isImplemented: false
365372
evidence: ""
366373
comments: ""
@@ -383,7 +390,7 @@ Information Gathering:
383390
iso27001-2017:
384391
- 12.1.3
385392
iso27001-2022:
386-
- ISO 27001:2022 mapping is missing
393+
- 8.6
387394
isImplemented: false
388395
evidence: ""
389396
comments: ""

0 commit comments

Comments
 (0)