This clause refers to ISO/IEC 27000, which contains the official vocabulary.
- It lists key information security term definitions for concepts such as:
- Information security
- Risk
- Control
- Asset
- ISMS
This ensures consistent interpretation of requirements across organizations.