TS ISO/IEC 27000

TS ISO/IEC 27000 is an overview and vocabulary standard for information security management systems (ISMS), providing the shared language used across the ISMS standards family. It introduces the ISMS concept, explains the role of the Plan-Do-Check-Act (PDCA) cycle in this field, and brings together the key terms and definitions used throughout the family.

Common concepts across the ISMS family

In general technical terms, an information security management system is a management framework for handling confidentiality, integrity, and availability in a coordinated way. It is broader than a collection of technical safeguards alone: it also involves governance, risk-based thinking, assigned responsibilities, monitoring, and continual improvement. A vocabulary standard like this helps ensure that the same concepts are interpreted consistently across related standards and implementation contexts.

PDCA and terminology alignment

The PDCA cycle describes the logic of planning a management system, implementing it, checking results, and acting on findings to improve performance. In the ISMS context, this means security controls are treated as part of an ongoing management process rather than one-time measures. The scope of TS ISO/IEC 27000 is limited to an overview, a brief PDCA explanation, and the terms and definitions used within the ISMS standards family, so its value lies in conceptual consistency and shared understanding.

• Overview of the ISMS standards family
• Introduction to information security management systems
• Brief description of the PDCA process
• Terms and definitions used across the family