SIST EN ISO/IEC 27001:2023/A1:2025

SLOVENSKI STANDARD
01-februar-2025
Informacijska varnost, kibernetska varnost in varstvo zasebnosti - Sistemi
upravljanja informacijske varnosti - Zahteve - Dopolnilo A1 (ISO/IEC
27001:2022/Amd 1:2024)
Information security, cybersecurity and privacy protection - Information security
management systems - Requirements - Amendment 1: Climate action changes (ISO/IEC
27001:2022/Amd 1:2024)
Informationssicherheit, Cybersicherheit und Datenschutz -
Informationssicherheitsmanagementsysteme - Anforderungen - Änderung 1:
Ergänzungen zu klimabezogenen Maßnahmen (ISO/IEC 27001:2022/Amd 1:2024)
Sécurité de l'information, cybersécurité et protection de la vie privée - Systèmes de
management de la sécurité de l'information - Exigences - Amendement 1: Actions
relatives aux changements climatiques (ISO/IEC 27001:2022/Amd 1:2024)
Ta slovenski standard je istoveten z: EN ISO/IEC 27001:2023/A1:2024
ICS:
03.100.70 Sistemi vodenja Management systems
35.030 Informacijska varnost IT Security
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD EN ISO/IEC
27001:2023/A1
NORME EUROPÉENNE
EUROPÄISCHE NORM
September 2024
ICS 03.100.70; 35.030
English version
Information security, cybersecurity and privacy protection
- Information security management systems -
Requirements - Amendment 1: Climate action changes
(ISO/IEC 27001:2022/Amd 1:2024)
Sécurité de l'information, cybersécurité et protection Informationssicherheit, Cybersicherheit und
de la vie privée - Systèmes de management de la Datenschutz -
sécurité de l'information - Exigences - Amendement 1: Informationssicherheitsmanagementsysteme -
Actions relatives aux changements climatiques Anforderungen - Änderung 1: Ergänzungen zu
(ISO/IEC 27001:2022/Amd 1:2024) klimabezogenen Maßnahmen (ISO/IEC
27001:2022/Amd 1:2024)
This amendment A1 modifies the European Standard EN ISO/IEC 27001:2023; it was approved by CEN on 2 September 2024.

CEN and CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for
inclusion of this amendment into the relevant national standard without any alteration. Up-to-date lists and bibliographical
references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to
any CEN and CENELEC member.
This amendment exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CEN and CENELEC member into its own language and notified to the CEN-CENELEC Management
Centre has the same status as the official versions.

CEN and CENELEC members are the national standards bodies and national electrotechnical committees of Austria, Belgium,
Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy,
Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia,
Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and United Kingdom.

Contents Page
European foreword . 3

European foreword
The text of ISO/IEC 27001:2022/Amd 1:2024 has been prepared by Technical Committee ISO/IEC JTC 1
"Information technology” of the International Organization for Standardization (ISO) and has been
taken over as EN ISO/IEC 27001:2023/A1:2024 by Technical Committee CEN-CENELEC/ JTC 13
“Cybersecurity and Data Protection” the secretariat of which is held by DIN.
This Amendment to the European Standard EN ISO/IEC 27001:2023 shall be given the status of a
national standard, either by publication of an identical text or by endorsement, at the latest by March
2025, and conflicting national standards shall be withdrawn at the latest by March 2025.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN-CENELEC shall not be held responsible for identifying any or all such patent rights.
Any feedback and questions on this document should be directed to the users’ national standards body.
A complete listing of these bodies can be found on the CEN and CENELEC websites.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the
following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria,
Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland,
Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of
North Macedonia, Romania, Serbi
...