{"id":4610,"date":"2014-01-20T22:32:33","date_gmt":"2014-01-20T22:32:33","guid":{"rendered":"https:\/\/multiacademstg.wpengine.com\/27001academy\/blog\/014\/01\/20\/iso-27000-series-what-to-expect-in-2014\/"},"modified":"2024-12-21T16:02:53","modified_gmt":"2024-12-21T16:02:53","slug":"iso-27000-series-what-to-expect-in-2014","status":"publish","type":"post","link":"https:\/\/advisera.com\/27001academy\/blog\/2014\/01\/20\/iso-27000-series-what-to-expect-in-2014\/","title":{"rendered":"What is the ISO 27000 series?"},"content":{"rendered":"
<\/div>\n

Updated: November 16, 2023. <\/em><\/p>\n

If you are working as an ISO 27001 consultant or practitioner, you are probably heavily dependent on the ISO\/IEC 27000-series of standards. Since there are quite a lot of them (see the list here<\/a>), it is a good idea to keep an eye on the most commonly used ones. So, let\u2019s see what ISO 27000 is, and what other standards from the ISO\/IEC 27K series are.<\/p>\n

\n
\n

The most popular standards from the ISO27k series are ISO 27000, ISO 27001, ISO 27002, ISO 27004, ISO 27005, ISO 27017, ISO 27018, and ISO 27701.<\/p>\n<\/div>\n<\/div>\n

ISO\/IEC 27000<\/strong> \u2013 This standard gives an overview of information security management, as well as the vocabulary (explanation of main terms) for information security. ISO 27000 certification is not possible.<\/p>\n

ISO\/IEC 27001<\/strong> \u2013 This standard gives the framework for the definition, implementation, operation, control, and improvement of an Information Security Management System. ISO 27001 framework is what makes this standard certifiable.<\/p>\n

ISO\/IEC 27002<\/strong> \u2013 This standard provides guidelines and recommendations for the implementation of controls from Annex A of ISO 27001.<\/p>\n

ISO\/IEC 27004<\/a><\/strong>\u00a0\u2013 This is the standard that defines how to measure information security.<\/p>\n

ISO\/IEC 27005<\/a><\/strong>\u00a0\u2013 This standard describes information security risk management.<\/p>\n

ISO\/IEC 27011<\/strong> is the standard that provides guidelines for information security management in telecoms.<\/p>\n

ISO\/IEC TR 27016<\/strong> is the standard that defines organizational economics for information security management.<\/p>\n

ISO\/IEC 27017<\/strong> is the standard that provides the code of practice for data protection in cloud computing services, and it depends heavily on ISO 27002.
\n

<\/div>