ISO/IEC 27000:2020 IT Security techniques - Information Security management systems - Overview & Vocabulary

Status: Live
Published: 01/01/2020
Security level: Official
Amended / Internally developed: False
Live on platform: 23/05/2021
Target Audience: Technical / General
Authoring body: International Organisation Standardisation (ISO)
Grading: no grading applied
Standards
Abstract

The International Organisation Standardisation (ISO) and the International Electrotechnical Commission (IEC) form the specialised system for worldwide standardisation. National bodies that are apart of the ISO or IEC participate through technical committees in the development of International standards to deal with particular areas of technical activities.

ISO/IEC in light of information technology provides an international standard and overview by for management systems by which a model can be followed in setting up and operating a management system. Information Security Management System (ISMS) is responsible for ensuring continuous development of the international management system standards.

Through the various standards developed, organisations can develop and implement a framework for managing and protecting the security of the information assets and systems including financial information, intellectual property, employee details, customer, client and third parties personal details.

The ISMS Standard includes standards that define requirements for an ISMS, provides direct support and guidance for the overall process to implement and maintain an ISMS standard, address conformity assessment for ISMS and provide terms and definitions for the international standard.

Category: Security