Compliance Framework

ISO/IEC 27001:2022

ISO 27001 is the international standard for information security management systems (ISMS), ensuring data confidentiality and integrity.

Audit In Progress

Coverage

100%

9 / 9 requirements

Controls Mapped

Security controls

Policies

Supporting policies

Scope

Information security management across all Mesta operations, covering organizational policies, technical controls, and risk management processes.

Framework Requirements

Organizational Controls

A.5.1satisfied

Policies for Information Security

Information security policy and topic-specific policies should be defined, approved, published, and communicated.

A.5.2satisfied

Information Security Roles and Responsibilities

Information security roles and responsibilities should be defined and allocated.

A.5.3satisfied

Segregation of Duties

Conflicting duties and areas of responsibility should be segregated.

Technological Controls

A.8.1satisfied

User Endpoint Devices

Information on user endpoint devices should be protected.

A.8.2satisfied

Privileged Access Rights

The allocation and use of privileged access rights should be restricted and managed.

A.8.3satisfied

Information Access Restriction

Access to information and other associated assets should be restricted.

A.8.5satisfied

Secure Authentication

Secure authentication technologies and procedures should be implemented.

A.8.10satisfied

Information Deletion

Information stored in information systems, devices or in any other storage media should be deleted when no longer required.

A.8.24satisfied

Use of Cryptography

Rules for the effective use of cryptography should be defined and implemented.

Mapped Controls (0)

No controls mapped to this framework yet.

Supporting Policies

Information Security Policy

v2.1.0 • risk

Access Control Policy

v1.8.0 • access

Data Protection and Privacy Policy

v3.0.0 • data

Incident Response Policy

v1.5.0 • incident

Business Continuity and Disaster Recovery Policy

v1.3.0 • bcdr

Change Management Policy

v2.0.0 • operations

Vendor and Third-Party Risk Management Policy

v1.6.0 • vendor

Acceptable Use Policy

v1.4.0 • hr

Human Resources Security Policy

v2.2.0 • hr

Asset Management Policy

v1.7.0 • operations

Cryptography and Encryption Policy

v1.9.0 • cryptography

Vulnerability Management Policy

v1.5.0 • operations

Secure Software Development Policy

v2.3.0 • development

Physical Security Policy

v1.2.0 • physical

Monitoring and Logging Policy

v1.6.0 • operations

Framework Details

Framework ID: iso27001
Status: in progress
Total Requirements: 9
Satisfied: 9

Coverage Progress

Overall Coverage100%