Meryam Sahin (talk | contribs) No edit summary |
Meryam Sahin (talk | contribs) No edit summary |
||
| Line 1: | Line 1: | ||
{{Textbox|boxtype=note|header=About this chapter|text=This chapter refers to other standards that are required to fully apply ISO 27001.|icon=no}} | |||
This chapter refers to other standards that are required to fully apply ISO 27001. | |||
== ISO/IEC 27000 == | == ISO/IEC 27000 == | ||
Revision as of 14:24, 22 June 2026
About this chapterThis chapter refers to other standards that are required to fully apply ISO 27001.
ISO/IEC 27000
- The key reference is ISO/IEC 27000, which provides fundamental concepts and vocabulary for information security management.
- This ensures that all organizations using ISO 27001 apply:
- Consistent terminology
- The referenced standard (ISO/IEC 27000) provides official definitions (e.g., “risk,” “control,” “ISMS”), so everyone interprets Clause 1 requirements the same way.
- Shared concepts and principles It establishes a common baseline of information security concepts needed to implement an ISMS as described in Clause 1.
- Correct application of scope Without the definitions and concepts in ISO 27000, organizations might misunderstand what an ISMS includes or how to apply it.
