A.5.8 Information security in project management | ISO 27001 Control

Purpose

To ensure information security requirements are identified and addressed throughout the project lifecycle.

Implementation Guidance

Include security requirements in project initiation and planning phases

Conduct security risk assessments for new projects

Ensure security reviews are part of project milestones and approvals

Involve information security team in relevant projects

Document security decisions and requirements in project documentation

Recommended Tools

Jira

Popular issue tracking and project management tool by Atlassian. Standard for tech teams.

Linear

Modern issue tracking built for speed. Popular among startups for its clean UX and fast performance.

Notion

All-in-one workspace for documentation, policies, and knowledge management. Perfect for startups to manage all ISO 27001 documentation.

Confluence

ISO 27001 Services from the Directory

These providers can help you implement A.5.8 and achieve ISO 27001 certification.

Advisera

Provider of ISO 27001 documentation, training, and consultancy services to help businesses achieve compliance.

Anecdotes

Enterprise agentic GRC platform with 230+ integrations and 40+ pre-mapped frameworks for Fortune 500 compliance programs.

Arrow Cyber Advisors

Arrow Cyber Advisors enables organizations to build measurable cybersecurity maturity and resilience. We specialize in governance, risk and compliance advisory, providing clear security direction, maturity benchmarking, and execution support tailored to regulated and high-risk environments.