The International Electrotechnical Commission

The International Electrotechnical Commission

The ISO 27000 standard was developed by The International Electrotechnical Commission (IEC) and International Standards Organization (ISO). The ISO 27000 is an industry standard and internationally accepted for information security management.

The ISO 27000 family provides an extensive list of requirements and codes of practice. Of which, ISO 27001 is a specification that sets out the specific requirements that must be followed that a companies information security management system (ISMS) can be audited and certified against. All the other ISO 27000 standards are codes of practice. Therefore ISO 27002, 27003, 27004, 27005, and 27006 will provide non-mandatory but considered as best practice guidelines that companies can choose to follow as required.

With the surge of hack’s and website breaches that have involved many large organizations and their customers information being obtained and leaked has cause for many to realize that no matter how protected you think you are it may require much more consideration than previously thought. This is why there is legislation and requirements in place to help protect that data and all consumers from having their data stolen. As such all companies dealing with sensitive information must comply with the following regulations.

Related posts

• Why Do We Have Standards?
• International Electrotechnical Commission (IEC) Technical Committee
• IEEE Standard Test Methods