Meryam Sahin (talk | contribs) m 1 revision imported |
Meryam Sahin (talk | contribs) No edit summary |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{ | {{Textbox|boxtype=note|header=About this chapter|text=This chapter refers to other standards that are required to fully apply ISO 27001.|icon=no}} | ||
'''ISO/IEC 27000''' | |||
* The key reference is '''ISO/IEC 27000''', which provides '''fundamental concepts and vocabulary''' for information security management. | |||
* This ensures that all organizations using ISO 27001 apply: | |||
** '''Consistent terminology''' | |||
** The referenced standard (ISO/IEC 27000) provides official definitions (e.g., “risk,” “control,” “ISMS”), so everyone interprets Clause 1 requirements the same way. | |||
** '''Shared concepts and principles''' It establishes a common baseline of information security concepts needed to implement an ISMS as described in Clause 1. | |||
** '''Correct application of scope''' Without the definitions and concepts in ISO 27000, organizations might misunderstand what an ISMS includes or how to apply it. | |||
Latest revision as of 14:27, 22 June 2026
About this chapterThis chapter refers to other standards that are required to fully apply ISO 27001.
ISO/IEC 27000
- The key reference is ISO/IEC 27000, which provides fundamental concepts and vocabulary for information security management.
- This ensures that all organizations using ISO 27001 apply:
- Consistent terminology
- The referenced standard (ISO/IEC 27000) provides official definitions (e.g., “risk,” “control,” “ISMS”), so everyone interprets Clause 1 requirements the same way.
- Shared concepts and principles It establishes a common baseline of information security concepts needed to implement an ISMS as described in Clause 1.
- Correct application of scope Without the definitions and concepts in ISO 27000, organizations might misunderstand what an ISMS includes or how to apply it.
