ISO 27000 is an international standards relating to information security. It represents a range of standards still in the process to developed.

Published standards:

• ISO 27001 (published in 2005) specifies management requirements regarding  the information security management systems (ISMS). The ISMS is meant to set security measures in order to insure the protection of corporation’s goods upon a defined area.
• ISO 27002 (published in 2005 formerly 17799) is a guide of 133 measures called “best practices” which is used by persons in charge of managing and setting up an ISMS.
• ISO 27006 (published in 2007) defines the standard of ISMS certification.

Coming:

• ISO 27000 (2009) vocabulary.
• ISO 27003 (2009) guide of establishment of ISMS.
• ISO 27004 (2008) metrics and measurements.
• ISO 27005 (2008) risk management.
• ISO 27007 (2010) audit of ISMS.

<< back