No. You choose the controls that you need based on risk and your business need. You can also select other controls that are not contained in ISO 27002.