ISO/IEC 27000:2014 pdf free.Information technology — Security techniques — Information security management systems — Overview and vocabulary.
ISO/IEC 27000:2014 provides the overview of information security management systems (ISMS), and terms and definitions commonly used in the ISMS family of standards.
ISO/IEC 27000:2014 is applicable to all types and sizes of organization (e.g. commercial enterprises, government agencies, not-for-profit organizations).
0.3 Purpose of this International Standard
This International Standard provides an overview of information security management systems, and defines related terms.
NOTE: AnnexA provides clarification on how verbal forms are used to express requirements and/or guidance in the 1SMS family of standards.
The ISMS family of standards includes standards that:
a) define requirements for an ISMS and for those certifying such systems;
b) provide direct support, detailed guidance and/or interpretation fur the overall process to establish, implement, maintain and improve an ESMS;
c) address sector-specilic guidelines for ISMS; and
d) address conformity assessment for ISMS.
The terms and definitions provided in this International Standard:
— cover commonly used terms and definitions in the ISMS family of standards;
— do not cover all terms and definitions applied within the ISMS family of standards; and
— do not limit the ISMS family of standards in defining new terms for use.
ISO/IEC 27000 provides the overview of information security management systems, and terms and definitions commonly used in the ISMS family of standards. This International Standard is applicable to all types and sizes of organization (e.g. commercial enterprises, government agencies, not-for-profit organizations).
3.7 Benefits of the ISMS family of standards
The benefits of implementing an ISMS will primarily result from a reduction in information security risks (i.e. reducing the probability of, and/or impact caused by, information security incidents). Specifically, benefits realized for an organization to achieve sustainable success from the adoption of the ISMS family of standards include:
a) a structured framework supporting the process of specifying, implementing, operating and maintaining a comprehensive, cost-effective, value creating, integrated and aligned ISMS that meets the organization’s needs across different operations and sites;
b) assistance for management in consistently managing and operating in a responsible manner their approach towards information security management, within the context of corporate risk management and governance, including educating and training business and system owners on the holistic management of in formation security;
c) promotion of globally-accepted good information security practices in a non-prescriptive manner, giving organizations the latitude to adopt and improve relevant controls that suit their specific circumstances and to maintain them in the face of internal and external changes;
d) provision of a common language and conceptual basis for information security, making it easier to place confidence in business partners with a compliant ISMS, especially if they require certification against ISO/IEC 27001 by an accredited certification body;
e) increase in stakeholder trust in the organization;
f) satisfying societal needs and expectations; and
g) more effective economic management of information security investments.
4 ISMS family of standards
4.1 General information
The ISMS family of standards consists of inter-related standards, already published or under development, and contains a number of significant structural components. These components are focused upon normative standards describing ISMS requirements (ISO/IEC 27001) and certification body requirements (ISO/IEC 27006) for those certifying conformity with ISO/IEC 27001. Other standards provide guidance for various aspects of an ISMS implemenialion, addressing a generic process, control- related guidelines as well as sector-specific guidance.
Relationships between the ISMS family of standards1’ are illustrated in Figure 1.