Annex A

Information security
controls reference

1
 Control Themes

Organizational People Physical Technological

All the rest of the If they concern If they concern physical If they concern
controls individual people objects technology

3
5
 Control Example

6
 Control Title

Attribute Table

Control

Purpose

Guidance

Other Information
9
 Operational Capabilities

Attribute Table

Information Security
Control Type Properties
Cybersecurity Concepts Security Domains

10