Identity & Access · Security Programs
Okta for ISO/IEC 27001:2022
What Okta’s data evidences toward ISO/IEC 27001:2022 today, and how to connect it.
What Okta evidences here
- MFA & identity coverage feeds Organizational Controls
This is where Okta’s data is documented as relevant on our ISO/IEC 27001:2022 page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Okta
MFA enrolment and factor coverage, suspicious sign-in events, and the SaaS app catalog — the broadest identity signal cmdash ingests.
About ISO/IEC 27001:2022
The 2022 Annex A control set, with evidence mapped from your connected tools and a crosswalk that carries the same evidence into ISO 42001.
Annex A controls. Clauses 4–10 are not modeled as controls.
Okta also evidences
ISO/IEC 42001:2023NIST AI Risk Management Framework 1.0NIST Cybersecurity Framework 2.0NIST Cybersecurity Framework (1.1, legacy)CIS Controls v8.1CMMC Level 1CMMC Level 2CMMC Level 3FedRAMP ModerateSOC 2 Type IIHITRUST CSF v11TISAX (VDA ISA v6)SOX ITGCGDPRHIPAA Security RulePCI DSS v4.0.1DORANYDFS Cybersecurity RegulationNIST SP 800-171 Revision 3