About this chapterThis chapter refers to ISO/IEC 27000, which contains the official vocabulary.
It lists key information security term definitions for concepts such as:
- Information security
- Risk
- Control
- Asset
- ISMS
This ensures consistent interpretation of requirements across organizations.