TS EN ISO/IEC 27000

TS EN ISO/IEC 27000 is the standard that brings together the common concepts, the overall framework, and the vocabulary used in information security management systems (ISMS). It provides a shared terminology base for understanding how organisations approach information security, and it helps users read the wider ISO/IEC 27000 family in a consistent way.

The general framework of information security management systems

In general technical terms, an ISMS is the systematic management of policies, processes, roles, and controls used to protect information assets. Core security objectives such as confidentiality, integrity, and availability sit at the centre of this discipline. TS EN ISO/IEC 27000 explains how these ideas are named and how the relevant terms are used, creating a common language for organisations of all types and sizes.

Why vocabulary standards matter

In information security standards, terms such as risk, control, incident, compliance, or process often carry more technical and context-dependent meanings than in everyday language. A vocabulary standard helps reduce inconsistent interpretation and supports consistency across management system documentation, audits, training, and implementation. This document is therefore best understood as a reference for the overall ISMS vocabulary and framework rather than as a methods standard.

• Provides shared terminology for organisation-wide information security management.
• Supports conceptual consistency across the ISO/IEC 27000 family.
• Applies across different sectors and organisation types.
• Connects management-system language with practical information security work.