ISO/IEC 27035-1:2023
ISO/IEC 27035-1:2023 is the base part of the ISO/IEC 27035 incident management series: why events and incidents happen and why coordination matters, the objectives and benefits of a structured approach, proportionality, the capability (policies, plan, process and the incident management structure), communication, the documentation set (event report, log, incident report, register), and the five-phase process from plan and prepare to learn lessons. Nineteen leaves: four on the 2023 text, 5.2 and 5.6 on the 2023 points restated by part 2, the rest on the complete 2011 ancestor.
ISO/IEC 27035-1:2023 is a compliance framework from International with 2 domains and 19 controls. The largest domains are Clause 4: Overview, capability, communication and documentation – ISO/IEC 27035-1:2023 (13 controls), Clause 5: Process – ISO/IEC 27035-1:2023 (6 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (2)
Clause 4: Overview, capability, communication and documentation – ISO/IEC 27035-1:2023
| Code | Title |
|---|---|
| iso-iec-27035-1-2023::4.1 | Basic concepts |
| iso-iec-27035-1-2023::4.2 | Objectives of incident management |
| iso-iec-27035-1-2023::4.3 | Benefits of a structured approach |
| iso-iec-27035-1-2023::4.4 | Adaptability |
| iso-iec-27035-1-2023::4.5.1 | General: an incident management capability proportionate to crises as well as incidents |
| iso-iec-27035-1-2023::4.5.2 | Policies, plan and process |
| iso-iec-27035-1-2023::4.5.3 | Incident management structure |
| iso-iec-27035-1-2023::4.6 | Communication |
| iso-iec-27035-1-2023::4.7.1 | General: documenting events, incidents and vulnerabilities throughout |
| iso-iec-27035-1-2023::4.7.2 | Event report |
| iso-iec-27035-1-2023::4.7.3 | Incident management log |
| iso-iec-27035-1-2023::4.7.4 | Incident report |
| iso-iec-27035-1-2023::4.7.5 | Incident register |
Clause 5: Process – ISO/IEC 27035-1:2023
| Code | Title |
|---|---|
| iso-iec-27035-1-2023::5.1 | Overview of the process |
| iso-iec-27035-1-2023::5.2 | Plan and prepare |
| iso-iec-27035-1-2023::5.3 | Detect and report |
| iso-iec-27035-1-2023::5.4 | Assess and decide |
| iso-iec-27035-1-2023::5.5 | Respond |
| iso-iec-27035-1-2023::5.6 | Learn lessons |
What is ISO/IEC 27035-1:2023 and who does it apply to?
ISO/IEC 27035-1:2023 is a compliance framework from International with 2 domains and 19 controls. ISO/IEC 27035-1:2023 is the base part of the ISO/IEC 27035 incident management series: why events and incidents happen and why coordination matters, the objectives and benefits of a structured approach, proportionality, the capability (policies, plan, process and the incident management structure), communication, the documentation set (event report, log, incident report, register), and the five-phase process from plan and prepare to learn lessons. Nineteen leaves: four on the 2023 text, 5.2 and 5.6 on the 2023 points restated by part 2, the rest on the complete 2011 ancestor. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does ISO/IEC 27035-1:2023 actually require?
ISO/IEC 27035-1:2023 has 19 controls organised across 2 domains. The largest domains are Clause 4: Overview, capability, communication and documentation – ISO/IEC 27035-1:2023 (13 controls), Clause 5: Process – ISO/IEC 27035-1:2023 (6 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of ISO/IEC 27035-1:2023 do I already cover?
ISO/IEC 27035-1:2023 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement ISO/IEC 27035-1:2023?
Start your ISO/IEC 27035-1:2023 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO/IEC 27035-1:2023 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 19 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required