Compliance · ISO 27001
ISO 27001: classify it, label it, control how it moves.
ISO/IEC 27001:2022 asks you to classify information, label it and control its transfer. GuardStance supports these Annex A controls with technical measures.
Book a demoWhich Annex A controls does GuardStance support?
| Requirement | What it asks | How GuardStance supports it |
|---|---|---|
| A.5.12 | Classification of information: classify information by its protection needs. | Labels set by content, context and your own rules. |
| A.5.13 | Labeling of information: label information according to your classification scheme. | Visual and metadata labels that travel with the file. |
| A.5.14 | Information transfer: have rules for transferring information. | Transfer rules driven directly by the file's classification label across endpoints, email, web, and cloud. |
| A.8.12 | Data leakage prevention: apply measures against the leakage of sensitive information. | One policy decides to monitor, warn, record or block. |
| A.8.15 | Logging: produce, keep and review logs of activities. | Every event is recorded and can be sent to your SIEM. |
GuardStance supports these requirements with technical controls. This is not legal advice; confirm legal questions with your counsel.