TS EN ISO/IEC 27000

TS EN ISO/IEC 27000 is the foundational vocabulary and overview standard for the information security management systems family. It helps readers understand the common conceptual framework behind an ISMS and use the core terms of the discipline consistently across related standards.

The common language of ISMS

An information security management system is broader than a set of technical controls. It brings together policy, process, roles, risk, and continual improvement. This standard provides the terms and definitions commonly used in the ISMS family, so core ideas such as confidentiality, integrity, and availability can be interpreted consistently across the standard set.

Coverage and boundaries

• It covers commonly used terms and definitions within the ISMS family of standards.
• It does not claim to include every term used across the family; it is a shared vocabulary, not an exhaustive dictionary.
• It does not restrict the family from introducing new terms for future use.
• It is applicable to organizations of all types and sizes, including commercial enterprises, government agencies, and not-for-profit organizations.

In general technical terms, a vocabulary standard like this functions as a reference language rather than an implementation guide. It supports consistent reading of standards such as ISO/IEC 27001 and related documents, and it improves alignment in risk assessment, audit work, and information security documentation.