• 0 Posts
  • 1 Comment
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle
  • ISO 27002 is a guidance and reference document for the ISO 27001 standard. There is no ISO 27002 certification. Organizations that wish to be ISO 27001 certified only have to follow the requirements listed in the ISO 27001 standard, not ISO 27002.

    Regardless, I just reviewed the latest releases (ISO 27001:2022 and ISO 27002:2022). There is no mention of containers or containerization within ISO 27001. Containerization and virtualization are both mentioned within the 27002 reference, as a potential method of isolating confidential data. If anything, the document is recommending the use of containers as a preventive control measure.