Understanding the Change
At Fujitsu, we strive to make compliance as seamless as possible for our customers. Recently, a challenge emerged related to how ISO 27001:2022 Annex A was mapped in our documentation (specifically AD 3567). Initially, this mapping referenced a complementary document—ISO 27002:2022—which incorporated key content from Annex A. However, the reliance on this secondary source complicated our compliance workflows and introduced unnecessary complexity into the mapping process for many of our clients.
After evaluating the impact with our mapping team, we determined that the best way to serve our customers was to remap Annex A directly into ISO 27001:2022 AD 3567. This adjustment simplifies the compliance process and eliminates confusion caused by cross-referencing multiple documents.
Swift Implementation and Customer-Centered Response. We began the remapping project on October 1, 2024, and completed the updates in just two weeks.
As part of our thorough quality control, we reviewed the saved lists and builds of all customers using this AD in their compliance programs. Due to the significant number of builds affected by the update, we proactively notified every impacted customer.
To make the transition smoother, we also offered free builds to customers working with ISO 27001:2022, enabling them to refresh their compliance spreadsheets without additional cost or effort.
What This Means for You
If you are currently using ISO 27001:2022 in shared lists, it’s crucial to update your lists and reshare them with your GRC (Governance, Risk, and Compliance) tool to ensure all references align with the new mapping. This update reflects our commitment to listening to customer feedback and delivering solutions that enhance your compliance experience.
They asked, we listened—and the result is happy customers!
If you have questions or need support with this update, feel free to reach out to us directly. We’re here to help make your compliance journey easier.