{"id":2137,"date":"2025-12-31T00:33:44","date_gmt":"2025-12-30T23:33:44","guid":{"rendered":"https:\/\/regulated-devsecops.com\/uncategorized\/%d8%aa%d8%af%d9%82%d9%8a%d9%82-%d8%a3%d9%85%d9%86-ci-cd-%d9%85%d8%ae%d8%b7%d8%b7-%d8%b1%d8%a8%d8%b7-%d8%a7%d9%84%d8%a7%d9%85%d8%aa%d8%ab%d8%a7%d9%84-iso-27001-soc-2-dora\/"},"modified":"2026-03-26T13:14:54","modified_gmt":"2026-03-26T12:14:54","slug":"ci-cd-security-audit-compliance-mapping-iso-27001-soc-2-dora","status":"publish","type":"post","link":"https:\/\/regulated-devsecops.com\/ar\/ci-cd-governance-ar\/ci-cd-security-audit-compliance-mapping-iso-27001-soc-2-dora\/","title":{"rendered":"\u062a\u062f\u0642\u064a\u0642 \u0623\u0645\u0646 CI\/CD \u2014 \u0645\u062e\u0637\u0637 \u0631\u0628\u0637 \u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644 (ISO 27001 \/ SOC 2 \/ DORA)"},"content":{"rendered":"\n

\u064a\u0631\u0628\u0637 \u062c\u062f\u0648\u0644 \u0627\u0644\u062a\u062f\u0642\u064a\u0642 \u0627\u0644\u0645\u0648\u062c\u0651\u0647 \u0646\u062d\u0648 \u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644<\/a> \u0647\u0630\u0627 \u0636\u0648\u0627\u0628\u0637 \u0623\u0645\u0646 CI\/CD<\/a> \u0628\u0623\u0637\u0631 \u062a\u0646\u0638\u064a\u0645\u064a\u0629 \u0648\u0636\u0645\u0627\u0646 \u0634\u0627\u0626\u0639\u0629.
\u0648\u0647\u0648 \u0645\u064f\u0639\u062f\u0651 \u0644\u062f\u0639\u0645 \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u062a\u062f\u0642\u064a\u0642 \u0627\u0644\u062f\u0627\u062e\u0644\u064a \u0648\u0627\u0644\u062a\u0642\u064a\u064a\u0645\u0627\u062a \u0627\u0644\u062e\u0627\u0631\u062c\u064a\u0629 \u0648\u0627\u0644\u062c\u0627\u0647\u0632\u064a\u0629 \u0627\u0644\u062a\u0646\u0638\u064a\u0645\u064a\u0629 \u0641\u064a \u0627\u0644\u0628\u064a\u0626\u0627\u062a \u0627\u0644\u0645\u0624\u0633\u0633\u064a\u0629.<\/p>\n\n\n\n

\n\n\n\n

\ud83d\udd10 \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0647\u0648\u064a\u0629 \u0648\u0627\u0644\u0648\u0635\u0648\u0644 (IAM)<\/h2>\n\n\n\n
\u0627\u0644\u0636\u0627\u0628\u0637<\/strong><\/th>ISO 27001<\/strong><\/th>SOC 2<\/strong><\/th>DORA<\/strong><\/th>\u0646\u0639\u0645<\/strong><\/th>\u0644\u0627<\/strong><\/th><\/tr><\/thead>
\u062a\u0637\u0628\u064a\u0642 \u0623\u062f\u0646\u0649 \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0644\u062d\u0633\u0627\u0628\u0627\u062a \u062e\u062f\u0645\u0629 CI\/CD<\/td>A.8.2 \/ A.5.15<\/td>CC6.1<\/td>ICT Risk Mgmt<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u0641\u0635\u0644 \u0628\u064a\u0646 \u0647\u0648\u064a\u0627\u062a \u0627\u0644\u0628\u0634\u0631 \u0648\u062e\u0637\u0648\u0637 \u0627\u0644\u0623\u0646\u0627\u0628\u064a\u0628<\/td>A.6.3<\/td>CC6.3<\/td>Governance<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
RBAC \u0644\u0625\u0639\u062f\u0627\u062f \u062e\u0637\u0648\u0637 \u0627\u0644\u0623\u0646\u0627\u0628\u064a\u0628<\/td>A.5.18<\/td>CC6.2<\/td>Access Control<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0625\u0644\u0632\u0627\u0645\u064a\u0629 MFA \u0644\u0645\u062f\u064a\u0631\u064a CI\/CD<\/td>A.5.17<\/td>CC6.1<\/td>ICT Security<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u0645\u0648\u0627\u0641\u0642\u0629 \u0645\u0637\u0644\u0648\u0628\u0629 \u0644\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0645\u062a\u0645\u064a\u0651\u0632\u0629 \u0641\u064a \u062e\u0637 \u0627\u0644\u0623\u0646\u0627\u0628\u064a\u0628<\/td>A.5.19<\/td>CC7.2<\/td>Change Mgmt<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83d\udd11 \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0623\u0633\u0631\u0627\u0631<\/h2>\n\n\n\n
\u0627\u0644\u0636\u0627\u0628\u0637<\/strong><\/th>ISO 27001<\/strong><\/th>SOC 2<\/strong><\/th>DORA<\/strong><\/th>\u0646\u0639\u0645<\/strong><\/th>\u0644\u0627<\/strong><\/th><\/tr><\/thead>
\u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u063a\u064a\u0631 \u0645\u062e\u0632\u064e\u0651\u0646\u0629 \u0641\u064a \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u062d\u0643\u0645 \u0628\u0627\u0644\u0645\u0635\u062f\u0631<\/td>A.8.12<\/td>CC6.1<\/td>ICT Security<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u062d\u0642\u0646 \u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u0641\u064a \u0648\u0642\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644<\/td>A.8.24<\/td>CC6.7<\/td>ICT Risk Mgmt<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0623\u0633\u0631\u0627\u0631 \u0645\u064f\u062d\u062f\u064e\u0651\u062f\u0629 \u0627\u0644\u0646\u0637\u0627\u0642 \u062d\u0633\u0628 \u0627\u0644\u0628\u064a\u0626\u0629<\/td>A.5.15<\/td>CC6.2<\/td>Governance<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u062a\u062f\u0648\u064a\u0631 \u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u0628\u0627\u0646\u062a\u0638\u0627\u0645<\/td>A.8.15<\/td>CC6.1<\/td>ICT Security<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0633\u062a\u0628\u0639\u0627\u062f \u0642\u064a\u0645 \u0627\u0644\u0623\u0633\u0631\u0627\u0631 \u0645\u0646 \u0627\u0644\u0633\u062c\u0644\u0627\u062a<\/td>A.8.16<\/td>CC7.2<\/td>Monitoring<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83d\udce6 \u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u062d\u0632\u0645 \u0648\u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a<\/h2>\n\n\n\n
\u0627\u0644\u0636\u0627\u0628\u0637<\/strong><\/th>ISO 27001<\/strong><\/th>SOC 2<\/strong><\/th>DORA<\/strong><\/th>\u0646\u0639\u0645<\/strong><\/th>\u0644\u0627<\/strong><\/th><\/tr><\/thead>
\u062a\u0639\u0632\u064a\u0632 \u0623\u0645\u0646 \u0628\u064a\u0626\u0627\u062a \u0628\u0646\u0627\u0621 CI\/CD<\/td>A.8.20<\/td>CC6.6<\/td>ICT Resilience<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u062a\u0637\u0628\u064a\u0642 \u062a\u0648\u0642\u064a\u0639 \u0627\u0644\u062d\u0632\u0645<\/td>A.8.23<\/td>CC7.3<\/td>Supply Chain<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0631\u0628\u0637 \u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0635\u062f\u0631 \u0628\u0627\u0644\u0643\u0648\u062f \u0648\u062e\u0637 \u0627\u0644\u0623\u0646\u0627\u0628\u064a\u0628 \u0648\u0627\u0644\u062d\u0632\u0645\u0629<\/td>A.8.9<\/td>CC7.2<\/td>Traceability<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0645\u0633\u062a\u0648\u062f\u0639\u0627\u062a \u0627\u0644\u062d\u0632\u0645 \u062a\u064f\u0637\u0628\u0651\u0642 \u0627\u0644\u0644\u0627\u062a\u063a\u064a\u064a\u0631<\/td>A.8.10<\/td>CC6.5<\/td>ICT Security<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0645\u0642\u062a\u0635\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629<\/td>A.8.21<\/td>CC6.6<\/td>Change Mgmt<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83d\udd17 \u062a\u0643\u0627\u0645\u0644\u0627\u062a \u0627\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u062e\u0627\u0631\u062c\u064a\u0629 \u0641\u064a CI\/CD<\/h2>\n\n\n\n
\u0627\u0644\u0636\u0627\u0628\u0637<\/strong><\/th>ISO 27001<\/strong><\/th>SOC 2<\/strong><\/th>DORA<\/strong><\/th>\u0646\u0639\u0645<\/strong><\/th>\u0644\u0627<\/strong><\/th><\/tr><\/thead>
\u0625\u0636\u0627\u0641\u0627\u062a CI\/CD \u0627\u0644\u062e\u0627\u0631\u062c\u064a\u0629 \u0645\u0639\u062a\u0645\u062f\u0629 \u0631\u0633\u0645\u064a\u0627\u064b<\/td>A.5.22<\/td>CC6.3<\/td>Third-Party Risk<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u062a\u0643\u0627\u0645\u0644\u0627\u062a \u0645\u064f\u062b\u0628\u064e\u0651\u062a\u0629 \u0639\u0644\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0645\u062d\u062f\u062f\u0629<\/td>A.8.8<\/td>CC7.3<\/td>Supply Chain<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u062e\u0627\u0631\u062c\u064a\u0629<\/td>A.8.23<\/td>CC7.3<\/td>ICT Security<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u062a\u0642\u064a\u064a\u062f \u0627\u0644\u0625\u0636\u0627\u0641\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0635\u0648\u0646\u0647\u0627 \u0627\u0644\u0645\u062c\u062a\u0645\u0639\u0627\u062a<\/td>A.5.23<\/td>CC6.6<\/td>Risk Mgmt<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0645\u0631\u0627\u0642\u0628\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062a\u0643\u0627\u0645\u0644\u0627\u062a<\/td>A.8.16<\/td>CC7.2<\/td>Monitoring<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83d\udcca \u0627\u0644\u062a\u0633\u062c\u064a\u0644 \u0648\u0627\u0644\u0645\u0631\u0627\u0642\u0628\u0629 \u0648\u0623\u062f\u0644\u0629 \u0627\u0644\u062a\u062f\u0642\u064a\u0642<\/h2>\n\n\n\n
\u0627\u0644\u0636\u0627\u0628\u0637<\/strong><\/th>ISO 27001<\/strong><\/th>SOC 2<\/strong><\/th>DORA<\/strong><\/th>\u0646\u0639\u0645<\/strong><\/th>\u0644\u0627<\/strong><\/th><\/tr><\/thead>
\u0646\u0634\u0627\u0637 \u062e\u0637 \u0623\u0646\u0627\u0628\u064a\u0628 CI\/CD \u0645\u064f\u0633\u062c\u064e\u0651\u0644 \u0628\u0627\u0644\u0643\u0627\u0645\u0644<\/td>A.8.15<\/td>CC7.2<\/td>Monitoring<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u0633\u062c\u0644\u0627\u062a \u062a\u0634\u0645\u0644 \u0627\u0644\u0645\u0648\u0627\u0641\u0642\u0627\u062a \u0648\u0641\u062d\u0648\u0635\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646<\/td>A.8.14<\/td>CC7.3<\/td>Governance<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u062c\u0645\u0639 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0645\u0631\u0643\u0632\u064a\u0627\u064b<\/td>A.8.16<\/td>CC7.2<\/td>ICT Risk Mgmt<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u0627\u062d\u062a\u0641\u0627\u0638 \u0628\u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0645\u062a\u0648\u0627\u0641\u0642 \u0645\u0639 \u0627\u0644\u0633\u064a\u0627\u0633\u0629<\/td>A.5.34<\/td>CC7.4<\/td>Record Keeping<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u0623\u062f\u0644\u0629 \u062a\u062f\u0639\u0645 \u0627\u0644\u062a\u062f\u0642\u064a\u0642 \u0648\u0627\u0644\u062a\u062d\u0642\u064a\u0642\u0627\u062a<\/td>A.5.31<\/td>CC2.2<\/td>Compliance<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83d\udee1\ufe0f \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u062a\u063a\u064a\u064a\u0631\u0627\u062a \u0648\u0627\u0644\u062d\u0648\u0643\u0645\u0629<\/h2>\n\n\n\n
\u0627\u0644\u0636\u0627\u0628\u0637<\/strong><\/th>ISO 27001<\/strong><\/th>SOC 2<\/strong><\/th>DORA<\/strong><\/th>\u0646\u0639\u0645<\/strong><\/th>\u0644\u0627<\/strong><\/th><\/tr><\/thead>
\u0627\u0644\u062a\u063a\u064a\u064a\u0631\u0627\u062a \u062a\u064f\u0631\u0627\u062c\u064e\u0639 \u0648\u062a\u064f\u0648\u0627\u0641\u064e\u0642 \u0639\u0644\u064a\u0647\u0627 \u0639\u0628\u0631 \u062e\u0637 \u0627\u0644\u0623\u0646\u0627\u0628\u064a\u0628<\/td>A.8.32<\/td>CC8.1<\/td>Change Mgmt<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u0641\u0635\u0644 \u0628\u064a\u0646 \u0623\u062f\u0648\u0627\u0631 \u0627\u0644\u0628\u0646\u0627\u0621 \u0648\u0627\u0644\u0646\u0634\u0631<\/td>A.6.3<\/td>CC6.3<\/td>Governance<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0633\u064a\u0627\u0633\u0629 \u0639\u0628\u0631 \u0627\u0644\u0628\u0648\u0627\u0628\u0627\u062a \u0627\u0644\u0622\u0644\u064a\u0629<\/td>A.5.19<\/td>CC7.2<\/td>ICT Security<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0627\u0644\u0627\u0633\u062a\u062b\u0646\u0627\u0621\u0627\u062a \u0645\u0639\u062a\u0645\u062f\u0629 \u0631\u0633\u0645\u064a\u0627\u064b \u0648\u0645\u064f\u0633\u062c\u064e\u0651\u0644\u0629<\/td>A.5.31<\/td>CC2.3<\/td>Compliance<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr>
\u0645\u0631\u0627\u062c\u0639\u0629 \u062d\u0648\u0643\u0645\u0629 CI\/CD \u062f\u0648\u0631\u064a\u0627\u064b<\/td>A.5.36<\/td>CC1.2<\/td>Oversight<\/td>\u2b1c<\/td>\u2b1c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062c\u062f\u0648\u0644 \u0627\u0644\u062a\u062f\u0642\u064a\u0642 \u0627\u0644\u062e\u0627\u0635 \u0628\u0627\u0644\u0627\u0645\u062a\u062b\u0627\u0644<\/h2>\n\n\n\n