national bodies that are members of iso or iec participate in the development of international standards through technical. annex a in iso 27001 is a part of the standard that lists a set of classified security controls that organisations use to demonstrate compliance with i