ISMS Sector Extensions Kit

OT asset classes, zone and conduit model, applicability decision, sector supplement register, energy topics mapped to Annex A, implementation table, IEC 62443 use, risk example

Telecom service and network landscape, sensitive information types, applicability decision, sector supplement register, telecom topics mapped to Annex A, implementation notes

Clinical systems and health data, health-specific considerations, break-glass access, sector supplement register, health topics mapped to Annex A, medical devices by reference

IoT role, inventory and architecture, risk sources, device security and privacy baseline, lifecycle controls, Annex A mapping, EU CRA example

88 mapping rows from ISO/IEC 27001 clauses and Annex A to NIST CSF 2.0, SOC 2 TSC IDs, NIS2 Art. 21(2), DORA articles, CIS v8.1, strength ratings, reverse gaps

ISO/IEC 27000 family by layer, editions as of 2026-11-01, certifiable or not, revision watch, what to buy per tier, if-you-are-X-read-Y table, standards library register

All 93 Annex A controls with basis, justification, status, reference document (DOC-ISMS IDs) and evidence, exclusions, additional controls, size tiers, records

Risk criteria and score-only bands, acceptance authority, criteria for assessments, event or asset-based steps, calibration, treatment, outputs, size tiers, AI variant