Question 1

What is ISO/IEC 27000?

Accepted Answer

ISO/IEC 27000 is a family of information security standards that provides a comprehensive framework for information security management systems (ISMS). It covers terminology, principles and best practices for managing information security, helping organisations to protect their information effectively and meet regulatory requirements.

Question 2

ISO 27001 background and history in brief

Accepted Answer

ISO and IEC cooperation

ISO 27001 has been developed in cooperation with the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The development of the standard started from the need to create a coherent and international framework for information security management. The first version was published in 2005 and provided a framework for organisations to effectively manage their information security risks.

ISO/IEC 27001:2013 update

In 2013, a major update, ISO/IEC 27001:2013, was published, bringing a number of improvements and changes, including a more risk-based approach and compatibility with other management system standards such as ISO 9001 and ISO 14001. The most recent changes have focused on improving the applicability of the standard to organisations of different sizes and types, as well as enhancing continuous improvement and risk management.

ISO/IEC 27001:2013 makes it easier than ever for organisations to integrate security management into their wider management system, increasing the effectiveness of their overall risk management and ensuring a high level of security.

ISO 27001 Information Security Management System Basics

Digital campaign

Autumn campaign to support the implementation of the EU's web code

Save LAN Oy

Services

Other links