TS EN ISO/IEC 27000

TS EN ISO/IEC 27000 is a terminology standard for the information security management systems (ISMS) field, providing the overview and common terms used across the ISO/IEC 27000 family. It helps organizations use a shared language for concepts such as risk, control, incident, compliance, and continual improvement, all of which are central to managing information security in a structured way.

Why common terminology matters in the ISMS family

Information security management is broader than technical safeguards alone; it combines governance, processes, roles, and risk treatment. This standard aligns the basic vocabulary used across ISO/IEC 27000-series documents so that policies, procedures, training material, and audit discussions can use terms consistently. In general technical terms, an ISMS is a management-system approach intended to balance confidentiality, integrity, and availability objectives.

Organisation types and practical context

The standard is applicable to organizations of all types and sizes, including commercial enterprises, government agencies, and not-for-profit organizations. As a vocabulary and overview document, it does not prescribe a control set or a test method; instead, it provides the common terminology foundation needed to understand and apply the ISMS family of standards. That makes it useful for training, documentation, and day-to-day implementation language.

• Common understanding of ISMS concepts
• Consistent use of ISO/IEC 27000-family terminology
• General applicability across sectors and organisation sizes