ISO/IEC 27000-series ISO/IEC 27000-series The ISO/IEC 27000-series (also known as the 'ISMS Family of Standards' or 'ISO27K' for short) comprises information security standards published jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The series provides best practice recommendations on information security management - the management of information risks through information security controls - within the context of an overall Information security management system (ISMS), similar in design to management systems for quality assurance (the ISO 9000 series), environmental protection (the ISO 14000 series) and other management systems. The series is deliberately broad in scope, covering more
ISO 14000 processes, and resources for developing, implementing, achieving, and maintaining the environmental policy." The ISO 14000 family includes most notably the ISO 14001 standard, which represents the core set of standards used by organizations for designing and implementing an effective environmental management system (EMS). Other standards in this series include ISO 14004, which gives additional guidelines for a good EMS, and more specialized standards dealing with specific aspects of environmental management. The major objective of the ISO 14000 series of norms is to provide "practical tools for companies and organizations of all kinds looking to manage their environmental responsibilities." The ISO