ARK Controls Ontology
type: Ontology
version IRI: ontology.ttl
abstract: This ontology defines sets of Control classes and their hierachies, taken from the ISO27002 document, HSE documents, that are used on the ARK Platform. Due to copyright restrictions, no definitions are provided for ISO controls.
access rights: http://publications.europa.eu/resource/authority/access-right/PUBLIC
contributor: Junli Liang
contributor: Nick McDonald
contributor: Rob Brennan
created: 2024-05-16
format: text/turtle
license: https://creativecommons.org/licenses/by/4.0/
modified: 2024-05-24
publisher: https://openark.adaptcentre.ie
rights: ©2024 ARK
source: ISO 27002:2022(E), https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/, https://www.cdc.gov/niosh/learning/safetyculturehc/module-3/2.html
status: unstable
preferred namespace prefix: arkctl
code repository: ARKControlsOntology
version info: 0.1
access URL: https://openark.adaptcentre.ie/Ontologies/ARKControlsOntology/ontology.ttl
byte size: 450KB
download URL: https://openark.adaptcentre.ie/Ontologies/ARKControlsOntology/ontology.ttl
introduction: This ontology defines sets of Control classes and their hierachies, taken from the ISO27002 document, HSE documents, that are used on the ARK Platform. Due to copyright restrictions, no definitions are provided for ISO controls.
rdfxml serialization: ontology.ttl
type: NamedIndividual
type: Dataset

has action owner
type: ObjectProperty
sub property of: hasControlOwner
domain: Control
range: Person
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: Links a https://openark.adaptcentre.ie/Ontologies/ARKCube#Person to an action

has action update
type: ObjectProperty
domain: Action
range: string
type: DatatypeProperty
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: Text that describes edit history/update of an action

has control
type: ObjectProperty
domain: Control group
range: Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: Links a control to a contorl group

has control owner
type: ObjectProperty
sub property of: assignedPerson
domain: Control
range: Person
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: Links a https://openark.adaptcentre.ie/Ontologies/ARKCube#Person to a control

has status
type: ObjectProperty
domain: Action
range: Status
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: Links a status to an action

has sub control group
type: ObjectProperty
domain: Control group
range: Control group
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: Link to create contorl group hierarchy

has target risk
type: ObjectProperty
domain: Action
range: Risk
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: Links an action to a risk

Acceptable use of information and other associated assets
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: InformationProtection
related: Integerity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Access control
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: Proection
related: Protect
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Proection
has related concept: Protect

Access rights
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Access to source code
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: Protect
related: Protection
related: SecureConfiguration
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SecureConfiguration

Action
type: Class
subclass of: HSE ERM Control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Actions are a future measure that will maintain and/or modify a risk. In the HSE, an action is a future measure to further reduce either the likelihood or impact of a risk.

Action owner
type: Class
subclass of: Control owner
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: A person responsible for particular action

Addressing information security within supplier agreements
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protection
related: SupplierRelationshipsSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection
has related concept: SupplierRelationshipsSecurity

Administrative Control
type: Class
subclass of: NIOSH Control
created: 2024-05-15
creator: Nick McDonald
comment: Administrative controls change the way work is done or give workers more information by providing workers with relevant procedures, training, or warnings. They’re often used together with higher-level controls.

Application security requirements
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Defence
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Assessment and decision on information security events
type: Class
subclass of: Detective
subclass of: Organizational control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Detect
related: InformationSecurityEventManagement
related: Integerity
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: Respond

Authentication information
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Cabling security
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Capacity management
type: Class
subclass of: Detective
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Continuity
related: Detect
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Continuity
has related concept: Detect
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Change management
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Classification of information
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Identify
related: InformationProtection
related: Integerity
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Identify
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protection

Clear desk and clear screen
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Confidentiality
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: Confidentiality
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Clock synchronization
type: Class
subclass of: Detective
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Defence
related: Detect
related: InformationSecurityEventManagement
related: Integerity
related: Protect
related: Protection
has related concept: Defence
has related concept: Detect
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Collection of evidence
type: Class
subclass of: Corrective
subclass of: Organizational control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Detect
related: InformationSecurityEventManagement
related: Integerity
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: Respond

Compliance with policies, rules and standards for information security
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: Identify
related: InformationSecurityAssurance
related: Integerity
related: LegalAndCompliance
related: Protect
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: InformationSecurityAssurance
has related concept: Integerity
has related concept: LegalAndCompliance
has related concept: Protect

Confidentiality or non-disclosure agreements
type: Class
subclass of: People control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: HumanResourceSecurity
related: InformationProtection
related: Integerity
related: Protect
related: SupplierRelationshipsSecurity
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: HumanResourceSecurity
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protect
has related concept: SupplierRelationshipsSecurity

Configuration management
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SecureConfiguration
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SecureConfiguration

Contact with authorities
type: Class
subclass of: Corrective
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Governance
related: Identify
related: Integerity
related: Protect
related: Recover
related: Resillience
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Governance
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Recover
has related concept: Resillience
has related concept: Respond

Contact with special interest groups
type: Class
subclass of: Corrective
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Govrnance
related: Integerity
related: Protect
related: Recover
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Govrnance
has related concept: Integerity
has related concept: Protect
has related concept: Recover
has related concept: Respond

Control group
type: Class
subclass of: AccessControlEntity
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: A group that persons can share controls with each other, add metameta to describe the controls in the group, and create custom control hierachies.

Control owner
type: Class
subclass of: Person
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05

Corrective
type: Class
subclass of: ISO Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)

Corrective control
type: Class
subclass of: Reactive control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Corrective controls are designed to correct errors or undesirable events which have occurred and will prevent further occurrences.

Data leakage prevention
type: Class
subclass of: Detective
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Confidentiality
related: Detect
related: InformationProtection
related: Protect
related: Protection
has related concept: Confidentiality
has related concept: Detect
has related concept: InformationProtection
has related concept: Protect
has related concept: Protection

Data masking
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Confidentiality
related: InformationProtection
related: Protect
related: Protection
has related concept: Confidentiality
has related concept: InformationProtection
has related concept: Protect
has related concept: Protection

Detective
type: Class
subclass of: ISO Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)

Detective control
type: Class
subclass of: Reactive control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Detective controls are designed to search for and identify errors or undesirable events after they have occurred so that corrective actions can be taken.

Directive control
type: Class
subclass of: Proactive control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Directive controls give direction. These can be, for example, statutory obligations, regulatory standards including professional standards, or other organisational requirements or instructions, many of which are converted into policies, procedures, circulars, standard operating procedures and training.

Disciplinary process
type: Class
subclass of: Corrective
subclass of: People control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: HumanResourceSecurity
related: Integerity
related: Protect
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: HumanResourceSecurity
has related concept: Integerity
has related concept: Protect
has related concept: Respond

Documented operating procedures
type: Class
subclass of: Corrective
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: AssetManagement
related: Availability
related: Confidentiality
related: Continuity
related: Defence
related: GovernanceAndEcosystem
related: IdentityAndAccessManagement
related: InformationSecurityEventManagement
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
related: Recover
related: SecureConfiguration
related: SystemAndNetworkSecurity
related: ThreatAndVulnerabilityManagement
has related concept: ApplicationSecurity
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Continuity
has related concept: Defence
has related concept: GovernanceAndEcosystem
has related concept: IdentityAndAccessManagement
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection
has related concept: Recover
has related concept: SecureConfiguration
has related concept: SystemAndNetworkSecurity
has related concept: ThreatAndVulnerabilityManagement

Elimination
type: Class
subclass of: NIOSH Control
created: 2024-05-15
creator: Nick McDonald
comment: Elimination makes sure the hazard no longer exists. Most effective method

Engineering Control
type: Class
subclass of: NIOSH Control
created: 2024-05-15
creator: Nick McDonald
comment: Engineering controls reduce exposure by preventing hazards from coming into contact with workers. They still allow workers to do their jobs, though.

Equipment maintenance
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
related: Resilience
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection
has related concept: Resilience

Equipment siting and protection
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

External Assurance providers
type: Class
subclass of: HSE ERM Control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: assurance from external independent assurance providers such as Regulators.

HSE ERM Control
type: Class
subclass of: Control
contributor: Nick McDonald
created: 2024-05-08
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Controls are measures that maintain and/or modify risk. In the HSE, a control is a measure that is in place, is working effectively and operating to reduce either the likelihood or impact of a risk.

ICT readiness for business continuity
type: Class
subclass of: Corrective
subclass of: Organizational control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Continuity
related: Resilience
related: Respond
has related concept: Availability
has related concept: Continuity
has related concept: Resilience
has related concept: Respond

ISO Control
type: Class
subclass of: Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-05-08
source: ISO/IEC 27002:2022(E)
comment: An ISO control is defined as a measure that modifies or maintains risk. Some of the controls in this document are controls that modify risk, while others maintain risk. An information security policy, for example, can only maintain risk, whereas compliance with the information security policy can modify risk. Moreover, some controls describe the same generic measure in different risk contexts. This document provides a generic mixture of organizational, people, physical and technological information security controls derived from internationally recognized best practices.

Identity management
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Independent review of information security
type: Class
subclass of: Corrective
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: Identify
related: InformationSecurityEventManagement
related: Integerity
related: Protect
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: Protect

Information access restriction
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Information backup
type: Class
subclass of: Corrective
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Continuity
related: Integerity
related: Protection
related: Recover
has related concept: Availability
has related concept: Continuity
has related concept: Integerity
has related concept: Protection
has related concept: Recover

Information deletion
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Confidentiality
related: InformationProtection
related: LegalAndCompliance
related: Protect
related: Protection
has related concept: Confidentiality
has related concept: InformationProtection
has related concept: LegalAndCompliance
has related concept: Protect
has related concept: Protection

Information security awareness, education and training
type: Class
subclass of: People control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: HumanResourceSecurity
related: Integerity
related: Protect
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: HumanResourceSecurity
has related concept: Integerity
has related concept: Protect

Information security during disruption
type: Class
subclass of: Corrective
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Continuity
related: Integerity
related: Protect
related: Protection
related: Resilience
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: Continuity
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Resilience
has related concept: Respond

Information security event reporting
type: Class
subclass of: Detective
subclass of: People control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Detect
related: InformationSecurityEventManagement
related: Integerity
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: InformationSecurityEventManagement
has related concept: Integerity

Information security for use of cloud services
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: InformationSecurityAssurance
related: Integerity
related: Protect
related: Protection
related: SupplierRelationshipsSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: InformationSecurityAssurance
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SupplierRelationshipsSecurity

Information security in project management
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Governance
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Information security in supplier relationships
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protection
related: SupplierRelationshipsSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection
has related concept: SupplierRelationshipsSecurity

Information security incident management planning and preparation
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Governance
related: IdentityAndAccessManagement
related: Integerity
related: Recover
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Governance
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Recover
has related concept: Respond

Information security roles and responsibilities
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Governance
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protection
related: Resilience
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection
has related concept: Resilience

Information transfer
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: Defence
related: InformationProtection
related: Integerity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Installation of software on operational systems
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SecureConfiguration
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SecureConfiguration

Intellectual property rights
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: LegalAndCompliance
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: LegalAndCompliance

Inventory of information and other associated assets
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection

Labelling of information
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: InformationProtection
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Learning from information security incidents
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Identify
related: InformationSecurityEventManagement
related: Integerity
related: Protect
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Identify
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: Protect

Legal, statutory, regulatory and contractual requirements
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: LegalAndCompliance
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: LegalAndCompliance
has related concept: Protection

Logging
type: Class
subclass of: Detective
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Detect
related: InformationSecurityEventManagement
related: Integerity
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: Protection

Management of technical vulnerabilities
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protect
related: Protection
related: ThreatAndVulnerabilityManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: ThreatAndVulnerabilityManagement

Management responsibilities
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Governance
related: GovernanceAndEcosystem
related: Identify
related: Integerity
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity

Managing information security in the ICT supply chain
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protection
related: SupplierRelationshipsSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection
has related concept: SupplierRelationshipsSecurity

Monitoring activities
type: Class
subclass of: Corrective
subclass of: Detective
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defemce
related: Detect
related: InformationSecurityEventManagement
related: Integerity
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: Defemce
has related concept: Detect
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: Respond

Monitoring, review and change management of supplier services
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: GovernanceAndEcosystem
related: Identify
related: InformationSecurityAssurance
related: Integerity
related: Protection
related: SupplierRelationshipsSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: InformationSecurityAssurance
has related concept: Integerity
has related concept: Protection
has related concept: SupplierRelationshipsSecurity

Networks security
type: Class
subclass of: Detective
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Detect
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Detect
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

NIOSH Control
type: Class
subclass of: Control
contributor: Nick McDonald
created: 2024-05-08
comment: Controls are measures that maintain and/or modify risk. In the NIOSH hierarchy, a control is a measure that is in place, is working effectively and operating to reduce either the likelihood or impact of a risk.

Organizational control
type: Class
subclass of: ISO Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)

Outsourced development
type: Class
subclass of: Detective
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Detect
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Protect
related: Protection
related: SupplierRelationshipsSecurity
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Detect
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SupplierRelationshipsSecurity
has related concept: SystemAndNetworkSecurity

People control
type: Class
subclass of: ISO Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)

Personal protective equipment
type: Class
subclass of: NIOSH Control
created: 2024-05-15
creator: Nick McDonald
comment: Personal protective equipment (PPE) includes clothing and devices to protect workers. PPE needs constant effort and attention (including proper use and training) from workers. Higher-level controls aren’t always feasible, and PPE might be needed in conjunction with other control measures. Least effective contols.

Physical control
type: Class
subclass of: ISO Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)

Physical entry
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Physical security monitoring
type: Class
subclass of: Detective
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Detect
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Physical security perimeters
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Policies for information security
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Governance
related: GovernanceAndEcosystem
related: Identify
related: Integerity
related: Resilience
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: GovernanceAndEcosystem
has related concept: Identify
has related concept: Integerity
has related concept: Resilience

Preventative control
type: Class
subclass of: Proactive control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Preventative controls are controls designed to stop, discourage, pre-empt or limit the possibility of an undesirable event before it occurs.

Preventive
type: Class
subclass of: ISO Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)

Privacy and protection of PII
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Identify
related: InformationProtection
related: Integerity
related: LegalAndCompliance
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Identify
has related concept: InformationProtection
has related concept: Integerity
has related concept: LegalAndCompliance
has related concept: Protect
has related concept: Protection

Privileged access rights
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Proactive control
type: Class
subclass of: HSE ERM Control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Proactive controls are put in place before the risk materialises

Protecting against physical and environmental threats
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Protection against malware
type: Class
subclass of: Corrective
subclass of: Detective
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Detect
related: InformationProtection
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Protection of information systems during audit testing
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: InformationProtection
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Protection of records
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: Defence
related: Identify
related: InformationProtection
related: Integerity
related: LegalAndCompliance
related: Protect
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Identify
has related concept: InformationProtection
has related concept: Integerity
has related concept: LegalAndCompliance
has related concept: Protect

Reactive control
type: Class
subclass of: HSE ERM Control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Reactive controlsfocus on what happens after the risk occurs or which identify weaknesses in our current controls

Redundancy of information processing facilities
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Continuity
related: Protect
related: Protection
related: Resilience
has related concept: AssetManagement
has related concept: Availability
has related concept: Continuity
has related concept: Protect
has related concept: Protection
has related concept: Resilience

Remote working
type: Class
subclass of: People control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: InformationProtection
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: InformationProtection
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Response to information security incidents
type: Class
subclass of: Corrective
subclass of: Organizational control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: InformationSecurityEventManagement
related: Integerity
related: Recover
related: Respond
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: InformationSecurityEventManagement
has related concept: Integerity
has related concept: Recover
has related concept: Respond

Responsibilities after termination or change of employment
type: Class
subclass of: People control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: HumanResourceSecurity
related: Integerity
related: Protect
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: HumanResourceSecurity
has related concept: Integerity
has related concept: Protect

Return of assets
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Risk treatment
type: Class
subclass of: HSE ERM Control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: Risk treatment is the process to modify risk.

Screening
type: Class
subclass of: People control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: HumanResourceSecurity
related: Integerity
related: Protect
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: HumanResourceSecurity
has related concept: Integerity
has related concept: Protect

Secure authentication
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: IdentityAndAccessManagement
related: Integerity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Secure coding
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Secure development life cycle
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Secure disposal or re-use of equipment
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Confidentiality
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Confidentiality
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Secure system architecture and engineering principles
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Securing offices, rooms and facilities
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Security of assets off-premises
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Security of network services
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Security testing in development and acceptance
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Identify
related: InformationSecurityAssurance
related: Integerity
related: Protection
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Identify
has related concept: InformationSecurityAssurance
has related concept: Integerity
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Segregation of duties
type: Class
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: CybersecurityTerminology#
related: Availability
related: Confidentiality
related: Governance
related: GovernanceAndEcosystem
related: IdentityAndAccessManagement
related: Integerity
related: Protect
has related concept: CybersecurityTerminology#
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: GovernanceAndEcosystem
has related concept: IdentityAndAccessManagement
has related concept: Integerity
has related concept: Protect

Segregation of networks
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Separation of development, test and production environments
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Status
type: Class
contributor: Junli Liang
contributor: Rob Brennan
comment: A class that indicates an action's status

Storage media
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Substitution
type: Class
subclass of: NIOSH Control
created: 2024-05-15
creator: Nick McDonald
comment: Substitution means changing out a material or process to reduce the hazard.

Supporting utilities
type: Class
subclass of: Detective
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Detect
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: Availability
has related concept: Detect
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

Technological control
type: Class
subclass of: ISO Control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)

Terms and conditions of employment
type: Class
subclass of: People control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: GovernanceAndEcosystem
related: HumanResourceSecurity
related: Integerity
related: Protect
has related concept: Availability
has related concept: Confidentiality
has related concept: GovernanceAndEcosystem
has related concept: HumanResourceSecurity
has related concept: Integerity
has related concept: Protect

Test information
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Confidentiality
related: InformationProtection
related: Integerity
related: Protect
related: Protection
has related concept: Confidentiality
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Threat intelligence
type: Class
subclass of: Corrective
subclass of: Detective
subclass of: Organizational control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Defence
related: Detect
related: Identigy
related: Integerity
related: Resillience
related: Respond
related: ThreatAndVulnerabilityManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Identigy
has related concept: Integerity
has related concept: Resillience
has related concept: Respond
has related concept: ThreatAndVulnerabilityManagement

Treatment plan
type: Class
subclass of: HSE ERM Control
created: 2024-05-15
creator: Nick McDonald
source: https://www2.healthservice.hse.ie/organisation/national-pppgs/hse-integrated-risk-management-policy/
comment: treatment plans detail both action and effective control plans, to minimise the likelihood and impact of the identified risk.

Use of cryptography
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SecureConfiguration
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SecureConfiguration

Use of privileged utility programs
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: ApplicationSecurity
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SecureConfiguration
related: SystemAndNetworkSecurity
has related concept: ApplicationSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SecureConfiguration
has related concept: SystemAndNetworkSecurity

User endpoint devices
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: AssetManagement
related: Availability
related: Confidentiality
related: InformationProtection
related: Integerity
related: Protect
related: Protection
has related concept: AssetManagement
has related concept: Availability
has related concept: Confidentiality
has related concept: InformationProtection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Web filtering
type: Class
subclass of: Preventive
subclass of: Technological control
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Integerity
related: Protect
related: Protection
related: SystemAndNetworkSecurity
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: SystemAndNetworkSecurity

Working in secure areas
type: Class
subclass of: Physical control
subclass of: Preventive
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
comment: See ISO27002:2022(E)
related: Availability
related: Confidentiality
related: Integerity
related: PhysicalSecurity
related: Protect
related: Protection
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: PhysicalSecurity
has related concept: Protect
has related concept: Protection

©2024 ARK
type: NamedIndividual
type: RightsStatement

Completed
type: NamedIndividual
type: Status
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: The status of an action is Completed

Open
type: NamedIndividual
type: Status
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-06-05
comment: The status of an action is Open