About this chapterThis chapter refers to ISO/IEC 27000, which contains the official vocabulary.


It lists key information security term definitions for concepts such as:

  • Information security
  • Risk
  • Control
  • Asset
  • ISMS

This ensures consistent interpretation of requirements across organizations.