Class Iso27001Rules

java.lang.Object

com.cloudforgeci.api.core.rules.Iso27001Rules

All Implemented Interfaces:

FrameworkRules<SystemContext>

@ComplianceFramework(value="ISO-27001",
                     priority=50,
                     displayName="ISO/IEC 27001:2022 Information Security Management",
                     description="Validates ISO 27001 information security controls for cloud infrastructure")
public class Iso27001Rules
extends Object
implements FrameworkRules<SystemContext>

ISO/IEC 27001:2022 Information Security Management compliance validation.

This is an example implementation demonstrating the v2.0 instance-based plugin architecture. External contributors can use this as a template for implementing additional compliance frameworks.

ISO 27001:2022 Coverage

The 2022 edition organizes Annex A into four themes (organizational, people, physical, technological) instead of the 2013 edition's 14 numbered clauses. This class checks controls from:

• A.5: Organizational Controls (access control, authentication information, information security during disruption)
• A.8: Technological Controls (cryptography, logging, monitoring activities, application security)

Usage:

"complianceFrameworks": "ISO-27001"

Since:

3.0.0

Constructor Summary

Constructors

Constructor	Description
Iso27001Rules()

Method Summary

Modifier and Type	Method	Description
Set<String>	claimedControls()	Controls checked across every validate* method above -- see FrameworkRules.claimedControls().
void	install(SystemContext ctx)	Install ISO 27001 compliance validation rules.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface FrameworkRules

alwaysLoad, description, displayName, frameworkId, getRequiredConfiguration, priority

Constructor Details

Iso27001Rules

public Iso27001Rules()

Method Details

install

public void install(SystemContext ctx)

Install ISO 27001 compliance validation rules.

This method demonstrates the v2.0 instance-based pattern where the class implements FrameworkRules as an instance method rather than using static methods.

Specified by:

install in interface FrameworkRules<SystemContext>

Parameters:

ctx - the system context containing deployment configuration

claimedControls

public Set<String> claimedControls()

Controls checked across every validate* method above -- see FrameworkRules.claimedControls(). ComplianceMatrix now has an ISO-27001 column; this declaration is kept in sync with it like the other infrastructure frameworks (PCI-DSS/HIPAA/SOC2/GDPR).

Specified by:

claimedControls in interface FrameworkRules<SystemContext>

Returns:

the control identifiers this framework's install() validates; empty if undeclared