ISO 9000 3 – Engagement of people Principle 4 – Process approach Principle 5 – Improvement Principle 6 – Evidence-based decision making Principle 7 – Relationship management ISO 9001:2015 Quality management systems — Requirements is a document of approximately 30 pages which is available from the national standards organization in each country. Only ISO 9001 is directly audited against for third party assessment purposes. Contents of ISO 9001:2015 are as follows: Essentially the layout of the standard is similar to the previous ISO 9001:2008 standard in that it follows the Plan, Do, Check, Act cycle in a process-based approach, but is now
ISO/IEC 27000 address this. The target audience is users of the remaining ISO/IEC 27000-series information security management standards. ISO/IEC 27000 ISO/IEC 27000 is part of a growing family of ISO/IEC Information Security Management Systems (ISMS) standards, the 'ISO/IEC 27000 series'. ISO/IEC 27000 is an international standard entitled: "Information technology — Security techniques — Information security management systems — Overview and vocabulary". The standard was developed by subcommittee 27 (SC27) of the first Joint Technical Committee (JTC1) of the International Organization for Standardization and the International Electrotechnical Commission. ISO/IEC 27000 provides: ISO/IEC 27000 is available via the ITTF website. (free download) The standard