A revised version of ISO 27001 is expected in October 2022. Some controls have been updated or reordered, some have been merged, removed entirely and new ones added. ISO 27001:2022 will have 93 controls, as opposed to ISO 27001:2013’s 114. There is no automatic transition to the new accreditation. Instead, it will be necessary for organisations who already hold an ISO27001:2013 certification to adapt their process and submit an application specifically for the new ISO27001:2022 certification. There will be a 2-year transition period for organisations that are already certified. This will allow them time to revise their security management systems and comply with the revised standard.