---
notetype: reference
standard: ISO 27001
version: 2022
language: EN
type: clause
id: "C.4.1"
title: "Understanding the organization and its context"
tags:
- iso27001/2022/EN
- sourcetext
status: active
---
## Clause 4.1: Understanding the organization and its context

The organization shall determine external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended outcome(s) of its information security management system.

NOTE Determining these issues refers to establishing the external and internal context of the organization considered in [Clause 5.4.1](../../../ISO31000-5.4.1-Understanding-the-organization-and-its-context.md) of ISO 31000:2018.

