TS EN ISO/IEC 27000

TS EN ISO/IEC 27000 is a foundational standard that provides a common frame of reference for information security management systems (ISMS) and brings together the terminology used across that family of standards. Its subject is the management approach to protecting information assets and the shared vocabulary used to describe that approach, rather than a set of individual security controls.

Why a shared ISMS vocabulary matters

In general technical terms, an ISMS links confidentiality, integrity, and availability objectives with governance, risk assessment, continual improvement, and suitable controls. This standard helps readers understand that system by aligning the meaning of core terms such as risk, control, incident, and compliance. That shared language is especially important where different teams, suppliers, and assurance processes need to use the same terminology consistently.

What this document includes and does not include

• It covers terms and definitions commonly used in the ISMS family of standards.
• It does not claim to include every term used across the whole family.
• It does not limit the introduction of new terms for use in the family.
• It is applicable to organizations of all types and sizes, including commercial enterprises, government agencies, and not-for-profit organizations.

For that reason, TS EN ISO/IEC 27000 is best understood as an entry point and terminology reference for information security management work. It helps users interpret the rest of the ISMS standards family by clarifying how key concepts are named and distinguished.