|
ISO/IEC 27000 is part of a growing family of ISO/IEC Information Security Management Systems (ISMS) standards, the 'ISO/IEC 27000 series'. ISO/IEC 27000 is an international standard entitled: ''Information technology — Security techniques — Information security management systems — Overview and vocabulary''. The standard was developed by sub-committee 27 (SC27) of the first Joint Technical Committee (JTC1) of the International Organization for Standardization and the International Electrotechnical Commission.〔ISO/IEC 27000:2014〕 ISO/IEC 27000 provides: * An overview of and introduction to the entire ISO/IEC 27000 family of Information Security Management Systems (ISMS) standards. * A glossary or vocabulary of fundamental terms and definitions used throughout the ISO/IEC 27000 family. ISO/IEC 27000 is available for gratis download via the ITTF website.〔(【引用サイトリンク】title=Publicly Available Standards )〕 == Overview and introduction == The standard explains the purpose of an Information Security Management System (ISMS), a management system similar to those recommended by other ISO standards such as ISO 9000 and ISO 14000, used to manage information security risks and controls within an organization. Bringing information security deliberately under overt management control is a central principle throughout the ISO/IEC 27000 standards. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「ISO/IEC 27000」の詳細全文を読む スポンサード リンク
|