ISMS Series 2 — What is ISO/IEC 27000 Series (ISO27K)?

Despite ISO / IEC 27001 Information Security Management System, ISO / IEC 27000 Series are not well-known by organizations. ISO / IEC 27001 is the standard that can be applied, certified, and recognized by clients. However, ISO / IEC 27001 appliance should unite with its related documents.

More in detail, let’s check some of the reference documents:

• ISO / IEC 27000 provides an overview and vocabulary.
• ISO / IEC 27002 guides how to apply controls required by ISO / IEC 27001.
• ISO / IEC 27003 provides guidance that refers successful implementation of the ISMS.
• ISO / IEC 27004 provides guidance that refers to successful monitoring, measurement, analysis, and evaluation for the performance evaluation requirements.
• ISO / IEC 27005 is the reference document for information security risk management.

A basic appliance of the ISMS will require the above documents. However, organizations should evaluate their business for requirements based on their sector. For example:

Certification or implementation of the ISMS will require ISO / IEC 27019 Information Security For Process Control In The Energy Industry standard to be applied for organizations operating in Energy Industry.

ISO / IEC 27017 Code Of Practice For Information Security Controls Based on ISO / IEC 27002 For Cloud Services should be applied if organizations use or provide cloud services.

This wikipedia page have list of the all standards referred as ISO / IEC 27000 Series, also ISO website have the all standards with their description.

Next Article: ISMS SERIES 3 — ISO / IEC 27001 Requirements and Controls Explained