11 New Controls in ISO 27001 updated version of 2022 explained

[@AbhishekKumar-ic5zu]

Perfectly Explained.. thank yu.

[@LearnITSecuritywithLuvJohar]

Thanks, please also share with your friends also

[@kapile8524]

Very nice and informative

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@kunalgaurav7841]

Very informative

[@LearnITSecuritywithLuvJohar]

Thanks 🤗 please share these videos and help me grow this channel

[@GauravSonkar-i8b]

Litrally I got the help and we are going for the re-certification ISO 2022 ,I am new one in this ISMS Department and I got the responsibility to implement all 11 New controls. So thanks for this litrally.

[@GauravSonkar-i8b]

You said that In next Video you will discuss everything in detail, I am unable to find the video anyone one have or can any one give me the link.

[@sparshitasuneja6179]

How did you start your career in this field? I'm new to it so can you guide me from where to start , what should I read to gain knowledge about this field and get my first job?

[@LearnITSecuritywithLuvJohar]

Simple go for ISO 27001, there are plenty of videos on my channel for ISO 27001, ISO 27001 will give you overall understanding of Information security and cyber security at an enterprise level, once you are able to implement ISMS then you will be able to understand this domain very easily

[@AnupamaKumar-eb9lm]

Good video. In process of implementation......27001

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@pragyabansal2157]

all your videos are very informative and awesome!! please do make detailed videos of all the controls it will help very much.

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@kulkarnihitendra]

Very nicely explained sir. Helped me to understand new controls

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@dileepshukla8668]

Very good introductory info on new controls. Thank you..

[@LearnITSecuritywithLuvJohar]

thanks brother

[@MegaShahzad]

so knowledgably you teach us , Weldon sir☺

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@yusufraza92]

Thank you very much Luv Johar Bhai .Bahut accha se explain kiya aapne. Please continue your good work. Appreciate!!

[@LearnITSecuritywithLuvJohar]

thanks for watching!

[@mahenderpadige8289]

very informative bro. pleasure to watch your videos. thank you so much

[@LearnITSecuritywithLuvJohar]

Glad you like them!

[@Theanonymousyou]

@ LUV Johar bhai-Thanks lot bhai for the awesome videos and information. Respect your valuable efforts bhaai, Thanks.

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@balkrishnabellatti1693]

Johar sir you are always very good in covering iso pci soc and other related topics. I have got the job only becos of reading and listening to your topics . So please make different topics on each of new controls

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@pankajagrawal9050]

Sir , Very good explanation, In simple terms YOU explained very well.

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@lovelyengland5259]

Please make 11 videos. This overview was great. Thanks

[@LearnITSecuritywithLuvJohar]

thanks will do for sure

[@vipulkumar276]

Ver well explained sir. Thank you so much

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@shahidsher3485]

big thanks sir!

[@LearnITSecuritywithLuvJohar]

please share the video with your friends and like them

[@ratnesh12100]

Nicely explained

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@deekshitatejasvi3560]

Very informative

[@LearnITSecuritywithLuvJohar]

thanks for watching!

[@VijayKumar-fz6pm]

Knowledgeable content

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@AnkitVerma-ys8ri]

Thankyou for the information. Helped in my work.

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@kapile8524]

When is your next video coming.. This was very helpful

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@ranjeetkumar-m6b3s]

@ luv johar sir, mujhe ye batao ki iso 27001:2013 me 14 domain the hum unko apni organization ke hisab se le lete the or same domain ki policies create karte the , lekin iso 27001:2022 version me 4 category di hui hai to kya ab hum policiya banay ki nahi , agar nahi to kya SOA sirf control ke liye hi banega with maping of category. ya fir hume policiya bhi banani according to 2013 version for while we are going to get certified with iso 27001:2022 ? please answer sir,

[@LearnITSecuritywithLuvJohar]

Jo bhi naey controls add hue hain unke hisaab se agar wo applicable hain to saari jagah be inclusion hoga unko fir chahe wo risk assessment ho ya fir SOA, har jagah pe

[@sunvampnaik]

Hello Sir, This is great!! would you share the latest Annexure if possible?

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)

[@saahilrehani4663]

Sir please explain each control in detail.

[@LearnITSecuritywithLuvJohar]

The 11 new controls of ISO 27001:2022 are: A.5.7 Threat intelligence This control addresses the need for organizations to be aware of the current threat landscape and to take appropriate steps to mitigate those threats. It includes activities such as collecting, analyzing, and sharing threat intelligence with relevant stakeholders. A.5.23 Information security for use of cloud services This control addresses the unique security challenges associated with cloud services. It includes activities such as assessing the security posture of cloud providers, implementing appropriate security controls, and monitoring cloud usage for potential risks. A.5.30 ICT readiness for business continuity This control ensures that organizations have the necessary ICT infrastructure and resources in place to support business continuity in the event of a disruption. It includes activities such as developing and testing business continuity plans, and ensuring that ICT systems are backed up and recoverable. A.7.4 Physical security monitoring This control ensures that organizations have appropriate monitoring in place to detect and respond to physical security incidents. It includes activities such as installing security cameras, monitoring access to buildings and facilities, and conducting security patrols. A.8.9 Configuration management This control ensures that ICT systems are properly configured and that changes to those configurations are managed in a controlled manner. It includes activities such as developing and maintaining configuration baselines, and implementing change control procedures. A.8.10 Information deletion This control ensures that information is securely deleted when it is no longer needed or required. It includes activities such as developing and implementing deletion procedures, and using secure deletion tools and techniques. A.8.11 Data masking This control protects sensitive data by making it unreadable to unauthorized individuals. It includes activities such as identifying which data to mask, and selecting and implementing appropriate data masking techniques. A.8.12 Data leakage prevention This control prevents unauthorized disclosure of data. It includes activities such as implementing data loss prevention (DLP) solutions and educating employees on how to prevent data leaks. A.8.16 Monitoring activities This control ensures that organizations have appropriate monitoring in place to detect and respond to security incidents. It includes activities such as monitoring system logs, network traffic, and user activity. A.8.23 Web filtering This control protects systems from being compromised by malware and prevents access to unauthorized web resources. It includes activities such as implementing web filtering solutions and educating employees on safe web browsing practices. A.8.28 Secure coding This control ensures that software is developed in a secure manner. It includes activities such as training developers on secure coding practices and implementing secure coding tools and techniques. Organizations that are already ISO 27001 certified should review the new controls and consider whether they need to implement any additional controls to comply with the new standard. The new standard was released in February 2022, and organizations have three years to transition to the new version.

[@purusottamsethi-db9ew]

Where is the part 2

[@syedtajwerali7895]

Sir have you delete the risk video which is made in this group

[@LearnITSecuritywithLuvJohar]

sorry which one brother?

[@syedtajwerali7895]

@@LearnITSecuritywithLuvJohar Risk Topic

[@x_man007]

There r 11 new controls:- A 5.7 Threat intelligence -- monitor threat help in hardening A 5.23 information security fir use of Cloud services -- purchasing, using, managing, termination of cloud (add on feature for critical data cloud) A 5.30 ICT readiness business continuity (info & communication technology) A 7.4 physical security monitoring for sensitive areas A 8.9 configuration management -- security configuration should be baselined A.8.10 information deletion -- delete data when no longer required in order to avoid leakage or compliance req A.8.11 Data masking -- with access control focus on personal data or sensitive data A8 12 Data leakage prevention (DLP) - unauthorised disclosure A 8.16 Monitoring Activities -- monitor all system for unusual activity (traffic monitor etc.) A.8.23 Web filtering - CASB solution etc. restric few websites A.8.28 - Secure coding -- in software development lifecycle, monitor activity before, during and after coding, protect source code..

[@LearnITSecuritywithLuvJohar]

Thanks 🤗 please share these videos and help me grow this channel

[@harikaika9058]

Nice explanation

[@LearnITSecuritywithLuvJohar]

thanks, please keep watching and share if you like this video :)