ISO 9000 However, the ISO certification process has been criticized as being wasteful and not being useful for all organizations. ISO 9000 was first published in 1987 by ISO (International Organization for Standardization). It was based on the BS 5750 series of standards from BSI that were proposed to ISO in 1979. However, its history can be traced back some twenty years before that, to the publication of government procurement standards, such as the United States Department of Defense MIL-Q-9858 standard in 1959, and the UK's Def Stan 05-21 and 05-24. Large organizations which supplied government procurement agencies often had to comply
ISO/IEC 27006 ISO/IEC 27006 ISO/IEC 27006, part of a growing family of ISO/IEC Information Security Management System (ISMS) standards, the 'ISO/IEC 27000 series', is an information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It is titled "Information technology - Security techniques - Requirements for bodies providing audit and certification of information security management systems". ISO/IEC 27006 lays out formal requirements for accredited organizations which certify other organizations compliant with ISO/IEC 27001. It effectively replaces EA 7/03 (Guidelines for the Accreditation of bodies operating certification/ registration of. Information Security Management Systems). The standard helps