Home / Resources / ISO 27001 Annex A Mapping
ISO 27001 Annex A Control Mapping
Overview of APPHOX's alignment with ISO 27001:2013 controls across organizational, technical, and physical security domains.
A.5 — Information Security Policies
Documented policies approved by senior leadership.
A.6 — Organization of Information Security
Dedicated security governance committee & defined roles.
A.9 — Access Control
RBAC, MFA, account lifecycle management, SSO, PAM.
A.12 — Operations Security
SCDLC, logging, SIEM, vulnerability monitoring.