Term | Definition |
---|---|
ISO 27000 | ISO 27000 refers to a family of international standards for information security management developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). These standards provide best practices for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). ISO 27001 is the most well-known standard in this series, focusing on the requirements for an ISMS. Other standards like ISO 27002 and ISO 27005 provide detailed guidelines for controls and risk management. Related terms: Information Security Management System (ISMS), ISO 27001, ISO 27002, Risk Management Information Security Compliance Standards |