Singahi Publishes Free Guide for ISO 27001:2022 Compliance

LUCKNOW, UTTAR PRADESH, INDIA, October 1, 2026 /CourierPR/ -- Singahi, a cybersecurity and compliance firm based in Lucknow, India, has published a free implementation guide to ISO/IEC 27001:2022, covering all 93 Annex A controls. The guide, which began publication on July 1, 2026, added one control per day until its final instalment went live on October 1, 2026.

This guide is part of Singahi’s broader effort to support organizations navigating the transition to the 2022 edition of ISO 27001, which ended its transition period on October 31, 2025. Certificates issued against the previous version, ISO 27001:2013, are no longer valid, and organizations must now comply with the revised standard. The 2022 revision restructures the previous 114 controls into 93, grouped under four themes: organizational, people, physical, and technological, and introduces 11 new controls in areas such as threat intelligence, cloud services, data leakage prevention, data masking, and secure coding.

For most companies, the real challenge lies in applying the standard, which involves deciding which controls are relevant, turning them into policies and day-to-day practice, and producing the evidence auditors will require. Singahi notes that one common misunderstanding is that every Annex A control is mandatory. In practice, organizations determine the controls they need through risk assessment and treatment, check them against Annex A, and record each decision, with its justification, in a Statement of Applicability.

Each control in the guide has a plain-language article explaining what the requirement means, how organizations typically implement it, and the questions auditors commonly raise. The articles also address Indian regulatory requirements such as the Digital Personal Data Protection (DPDP) Act, 2023, as well as RBI and SEBI guidance. Alongside each article is a downloadable Control Pack of templates and working documents, including a policy template and supporting procedure, implementation and audit-evidence checklists, a risk register, KPIs, and a gap analysis, a RACI matrix, and an implementation roadmap.

The guide is available now at singahi.com/resources/iso-27001-toolkit. Singahi plans to release guides on ISO 22301 for business continuity management, ISO/IEC 27701 for privacy information management, and ISO/IEC 42001 for AI management systems in the coming months. The ISO 22301 guide will start on October 2, 2026, and will run to 26 articles covering the standard clause by clause. The ISO/IEC 27701 guide, expected from late October, will follow the 2025 edition of the standard, which can now be adopted on its own rather than only as an extension to ISO 27001. The ISO/IEC 42001 guide, expected from December 2026, will cover the international standard for AI management systems, published in December 2023, applicable to organizations that develop, provide, or use AI-based products and services.

Organizations that want hands-on support can engage Singahi for gap assessments, internal audits, and implementation work ahead of certification.