5.25—Assessment and decision on information security events

>Control Description

Control 5.25 - Assessment and decision on information security events. This control is part of the Organizational Controls theme in ISO 27001:2022 Annex A.

>NIST CSF 2.0 Mappings

DE.AE-02 DE.AE-04 DE.AE-08 RS.AN-03 RS.AN-08 RS.MA-03 RS.MA-05

Control mappings sourced from NIST OLIR Catalog (public domain).

>Cross-Framework Mappings

NIST CSF 2.0

SOC 2 TSC

via AICPA TSC mapping structure

Ask AI

Configure your API key to use AI features.