ISO/IEC 27000 recommended by other ISO standards such as ISO 9000 and ISO 14000, used to manage information security risks and controls within an organization. Bringing information security deliberately under overt management control is a central principle throughout the ISO/IEC 27000 standards. Information security, like many technical subjects, is evolving a complex web of terminology. Relatively few authors take the trouble to define precisely what they mean, an approach which is unacceptable in the standards arena as it potentially leads to confusion and devalues formal assessment and certification. As with ISO 9000 and ISO 14000, the base '000' standard is intended to
ISO 15189 section on laboratory information management. ISO 15189 ISO 15189 Medical laboratories — Requirements for quality and competence is an international standard that specifies the quality management system requirements particular to medical laboratories. The standard was developed by the International Organisation for Standardization's Technical Committee 212 (ISO/TC 212). ISO/TC 212 assigned ISO 15189 to a working group to prepare the standard based on the details of ISO/IEC 17025:1999 "General requirements for the competence of testing and calibration laboratories". This working group included provision of advice to medical laboratory users, including specifics on the collection of patient samples, the interpretation of test