ISO/IEC 27000: Difference between revisions

From Wikipedia, the free encyclopedia
Browse history interactively
← Previous edit
Content deleted Content added
VisualWikitext
Marekjdj (talk | contribs)
105 edits
m Removed dot (.)
Cleaned up intro and added "about"
 
Line 1: Line 1:
{{about|the individual 27000 standard|the larger series of standards|ISO/IEC 27000-series}}
{{Short description|Information security management systems standards}}
{{Short description|Information security management systems standards}}
{{2p|date=April 2017}}{{Use British (Oxford) English|date=January 2012}}
{{2p|date=April 2017}}{{Use British (Oxford) English|date=January 2012}}
'''ISO/IEC 27000''' is part of a growing family of ISO/IEC standards - the '[[ISO/IEC 27000-series|ISO/IEC 27000 series]]'. ISO/IEC 27000 is an international standard titled: ''Information technology — Security techniques — Information security management systems — Overview and vocabulary''.
'''ISO/IEC 27000''' is one of the [[International Organization for Standardization|ISO]]/[[International Electrotechnical Commission|IEC]] [[technical standard|technical standards]] in the [[ISO/IEC 27000-series|ISO/IEC 27000 series]] of [[Information Security Management Systems]] (ISMS)-related standards. The formal title for ISO/IEC 27000 is ''Information technology — Security techniques — Information security management systems — Overview and vocabulary''.


The standard was developed by [[ISO JTC 1/SC 27|subcommittee 27 (SC27)]] of the first Joint Technical Committee (JTC1) of the [[International Organization for Standardization]] and the [[International Electrotechnical Commission]].<ref>ISO/IEC 27000:2016</ref>
The standard was developed by [[ISO JTC 1/SC 27|subcommittee 27 (SC27)]] of the first Joint Technical Committee (JTC1) of the ISO and IEC.<ref>ISO/IEC 27000:2016</ref>


ISO/IEC 27000 provides:
ISO/IEC 27000 provides:
* An overview of, and introduction to, the entire [[ISO/IEC 27000-series|ISO/IEC 27000 family of Information Security Management Systems (ISMS)-related standards]].
* An overview of, and introduction to, the entire ISO/IEC 27000 series.
* A glossary or vocabulary of the specialist terms used throughout the ISO/IEC 27000 family, formally defined.
* A formally-defined glossary or vocabulary of the specialist terms used throughout the ISO/IEC 27000 series.


ISO/IEC 27000 is available for free via the [[Information Technology Task Force|ITTF]] website.<ref>{{cite web |url=http://standards.iso.org/ittf/PubliclyAvailableStandards |title=Publicly Available Standa=2014-11-05}}</ref>
ISO/IEC 27000 is available for free via the [[Information Technology Task Force|ITTF]] website.<ref>{{cite web |url=http://standards.iso.org/ittf/PubliclyAvailableStandards |title=Publicly Available Standa=2014-11-05}}</ref>

Latest revision as of 11:05, 23 June 2023

This article is about the individual 27000 standard. For the larger series of standards, see ISO/IEC 27000-series.

ISO/IEC 27000 is one of the ISO/IEC technical standards in the ISO/IEC 27000 series of Information Security Management Systems (ISMS)-related standards. The formal title for ISO/IEC 27000 is Information technology — Security techniques — Information security management systems — Overview and vocabulary.

The standard was developed by subcommittee 27 (SC27) of the first Joint Technical Committee (JTC1) of the ISO and IEC.[1]

ISO/IEC 27000 provides:

  • An overview of, and introduction to, the entire ISO/IEC 27000 series.
  • A formally-defined glossary or vocabulary of the specialist terms used throughout the ISO/IEC 27000 series.

ISO/IEC 27000 is available for free via the ITTF website.[2]

Overview and introduction[edit]

The standard describes the purpose of an Information Security Management System (ISMS), a management system similar in concept to those recommended by other ISO standards such as ISO 9000 and ISO 14000, used to manage information security risks and controls within an organization. Bringing information security deliberately under overt management control is a central principle throughout the ISO/IEC 27000 standards.

Glossary[edit]

Information security, like many technical subjects, is evolving a complex web of terminology. Relatively few authors take the trouble to define precisely what they mean, an approach which is unacceptable in the standards arena as it potentially leads to confusion and devalues formal assessment and certification. As with ISO 9000 and ISO 14000, the base '000' standard is intended to address this.

The target audience is users of the remaining ISO/IEC 27000-series information security management standards.

See also[edit]

References[edit]

  1. ^ ISO/IEC 27000:2016
  2. ^ "Publicly Available Standa=2014-11-05".


Stub icon

This standards- or measurement-related article is a stub. You can help Wikipedia by expanding it.

Retrieved from "https://en.wikipedia.org/w/index.php?title=ISO/IEC_27000&oldid=1161538574"