ISMS view (ISO/IEC 27001/27002) mapping
Traceability shortcuts: Taxonomy → Minimum Evidence → Validator → Human Oversight Protocol.
This page maps selected ISO/IEC 27001/27002 themes (change management, access control, logging, evidence integrity) to AIMO evidence and artifacts. It is for explainability only; it does not guarantee conformity to ISO/IEC 27001 or 27002. Verify against the published standards.
Mapping table
| Framework reference / topic | AIMO evidence / where in AIMO | Evidence Bundle / Minimum Evidence | Artifacts & validation | Notes |
|---|---|---|---|---|
| A.5.24 – Information security in project management | Scope | request, review | templates/ev/ | Informative; verify against official text. |
| A.5.29 – Information security during disruption | Minimum Evidence | exception, renewal | templates/ev/ev_template.md | Informative; verify against official text. |
| A.5.30 – ICT readiness for business continuity | Overview | Summary; integrity | — | Informative; verify against official text. |
| A.8.1 – Inventory of assets | Dictionary | Dictionary, EV | schemas/jsonschema/aimo-dictionary.schema.json; schema_validate_dictionary | Informative; verify against official text. |
| A.8.2 – Information classification | Taxonomy | Dictionary; review | schemas/jsonschema/aimo-dictionary.schema.json; schema_validate_dictionary | Informative; verify against official text. |
| A.8.3 – Access control | Minimum Evidence | —; integrity | — | Informative; verify against official text. |
| A.8.15 – Logging | EV Template | EV, change_log; change_log | schemas/jsonschema/aimo-ev.schema.json; schema_validate_ev | Informative; verify against official text. |
| A.8.16 – Monitoring activities | Minimum Evidence | EV, change_log; change_log, integrity | templates/ev/ | Informative; verify against official text. |
| A.8.32 – Change management | Evidence Bundle | change_log; change_log | schemas/jsonschema/aimo-standard.schema.json | Informative; verify against official text. |
| A.8.33 – Test information | Validator | EV | validator/rules/, validator/src/; schema_validate_ev | Informative; verify against official text. |