ISO/IEC 27000:2012

Information technology -- Security techniques -- Information security management systems -- Overview and vocabulary

The electronic version of this International Standard can be downloaded from the ISO/IEC Information Technology Task Force (ITTF) web site

ISO/IEC 27000:2012 describes the overview and the vocabulary of information security management systems, which form the subject of the ISMS family of standards, and defines related terms and definitions.

ISO/IEC 27000:2012 is applicable to all types and sizes of organisation (e.g. commercial enterprises, government agencies, not-for-profit organisations).

General information ^

Status : Withdrawn

Publication date : 2012-12
Edition : 2
Technical Committee
:
ISO/IEC JTC 1/SC 27

Information Security, cybersecurity and privacy protection
ICS :

01.040.35

Information technology (Vocabularies)

03.100.70

Management systems

35.030

IT Security

Life cycle

A standard is reviewed every 5 years

Revisions / Corrigenda

Previously
ISO/IEC 27000:2009
Now withdrawn
ISO/IEC 27000:2012
Revised by
ISO/IEC 27000:2014

You may be interested in:

By Sandrine Tranchard on 23 April 2013

Additional support to financial services thanks to ISO/IEC

A new ISO/IEC technical report aims to provide additional support to the financial industry to set up an appropriate information security management system for the provisioning of their financial services while giving more confidence to their customers.

Got a question?

Check out our FAQs

Customer care

+41 22 749 08 88

customerservice@iso.org

Opening hours:
Monday to Friday - 09:00-12:00, 14:00-17:00 (UTC+1)