Structure of the ISO/IEC 27001 standard family
December 1, 2013
6 min read
Vinastar Consulting
View larger
The ISO/IEC 27000 family is a set of information security standards comprising multiple mutually supporting documents. ISO 27001 is the core standard that can be certified.
Key standards in the ISO 27000 family
- ISO/IEC 27000 — Overview and vocabulary
- ISO/IEC 27001 — Management system requirements (certifiable)
- ISO/IEC 27002 — Guidance for applying controls
- ISO/IEC 27003 — Implementation guidance
- ISO/IEC 27004 — Monitoring and measurement
- ISO/IEC 27005 — Information security risk management
- ISO/IEC 27701 — Privacy extension
Only ISO 27001 can be certified. All other standards in the family are guidance documents supporting implementation.
