ISO/IEC 27001 news from Infosec Standards https://infosecstandards.org/standards/iso-27001 News about ISO/IEC 27001, including major updates to our page on it. en-us ISO/IEC 27017 second edition updates cloud security controls https://infosecstandards.org/news/iso-27017-second-edition https://infosecstandards.org/news/iso-27017-second-edition Sat, 08 Aug 2026 00:00:00 GMT ISO and IEC published ISO/IEC 27017:2026, the second edition of the cloud security controls guidance based on ISO/IEC 27002:2022. The 2015 edition is withdrawn. ISO/IEC 27001:2013 certificates expired on October 31, 2025 https://infosecstandards.org/news/iso-27001-2013-certificates-expired https://infosecstandards.org/news/iso-27001-2013-certificates-expired Fri, 31 Oct 2025 00:00:00 GMT On October 31, 2025, the three-year transition to ISO/IEC 27001:2022 closed. Every certificate still issued against the 2013 edition expired or was withdrawn, and new certification is only available to the 2022 edition.