ISO/IEC 27017 second edition updates cloud security controls
ISO and IEC published ISO/IEC 27017:2026, the second edition of the cloud security controls guidance based on ISO/IEC 27002:2022. The 2015 edition is withdrawn.
ISO/IEC 27001:2013 certificates expired on October 31, 2025
On October 31, 2025, the three-year transition to ISO/IEC 27001:2022 closed. Every certificate still issued against the 2013 edition expired or was withdrawn, and new certification is only available to the 2022 edition.