About
The Art of Service, and why this record exists
This site is published by The Art of Service, an Australian standards and compliance publisher. It records the five control attributes for all 93 ISO/IEC 27002:2022 controls in our own words, and the public record of ISO/IEC 27028, so an ISMS manager can decide what to do before the guidance publishes.
Who publishes it
The Art of Service Pty Ltd, Queensland, Australia. The site is written and published by Gerard Blokdyk. Contact: support@theartofservice.com. The same publisher runs the compliance reference at compliance.theartofservice.com and the store at store.theartofservice.com.
Not affiliated with, endorsed by or approved by ISO or the IEC. ISO and IEC are not connected with this site, and nothing here is a certificate, an audit or legal advice.
Why a record and a checker
The attribute idea is easy to describe and hard to do consistently. A team can agree the five names and still assign different values to the same control, because the definitions are short and the context is local. The record gives every control page the same values, in the same order, with the source line, so a team can compare its own register with a published baseline and record where it differs.
The publication record exists because the standard is moving. A reader who finds a page saying "draft" or a date from a secondary source needs the dated stage and the source. The record is corrected when ISO corrects it, and the change watch is how a buyer hears about it.
How it is built
One reviewed record drives every page, the free check and the kit. The control values come from the ISO/IEC 27002:2022 record, exported control by control; the requirement, evidence and gap text is our statement of the clause in our own words, checked for overlap against the source before it ships. The publication facts come from the ISO record and are dated. No line is written from memory and presented as the standard's.
Contact and corrections
Corrections are welcome and are made on the record, with the date changed. Write to support@theartofservice.com. If a page states something the source does not support, say which page and which line; the record will be corrected and the changelog updated.
Postal address: The Art of Service Pty Ltd, Brisbane, Queensland, Australia.
The rules this is built from
Nothing here is invented. The record below is the one this site reads, clause by clause, and every line points to the one it came from.
- ISO/IEC 27002:2022
93 controls across four themes, each with five attribute values and the evidence an auditor asks for - ISO/IEC 27028
Edition 1, stage 60.00 under publication on 20 October 2026; the public record of the standard this site is named for
The ISO/IEC 27028 body is not public. This site states the public record and does not present a requirement from the draft as if it were the published text.