ISO/IEC 27001:2022/Context of the organization/2 of 123
4.2Understanding the needs and expectations of interested parties
Control family: Context of the organization
Control description
The organization shall determine:
a) interested parties that are relevant to the information security management system;
b) the relevant requirements of these interested parties;
c) which of these requirements will be addressed through the information security management
system.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.