TS ISO/IEC 27000

TS ISO/IEC 27000 is the introductory standard for the information security management systems (ISMS) family and the source of the core terms used across that family. It helps readers understand how information security is organised as a management-system discipline, providing a common vocabulary rather than prescribing specific technical safeguards.

A common framework for ISMS terminology

The standard’s main role is to present an overview of information security management systems and to align the terms and definitions used throughout the ISMS standards series. In general technical terms, an ISMS is a risk-based management framework that brings together policy, objectives, controls, incidents, and continual improvement. A vocabulary standard matters because the same words can otherwise be interpreted differently across policies, audits, implementations, and supplier documents; this standard helps keep that language consistent.

What its applicability means

• The standard is stated to be applicable to all types and sizes of organisation, including commercial enterprises, government agencies, and not-for-profit organisations.
• It collects terms and definitions commonly used in the ISMS family of standards, but it does not by itself define a required control set or a detailed implementation method.
• As a general technical context, information security management supports confidentiality, integrity, and availability through an organised management approach.
• Because it is a vocabulary and overview standard, it is especially useful when navigating the other standards in the ISO/IEC 27000 series.