ISO/IEC 27000 recommended by other ISO standards such as ISO 9000 and ISO 14000, used to manage information security risks and controls within an organization. Bringing information security deliberately under overt management control is a central principle throughout the ISO/IEC 27000 standards. Information security, like many technical subjects, is evolving a complex web of terminology. Relatively few authors take the trouble to define precisely what they mean, an approach which is unacceptable in the standards arena as it potentially leads to confusion and devalues formal assessment and certification. As with ISO 9000 and ISO 14000, the base '000' standard is intended to
ISO 14000 processes, and resources for developing, implementing, achieving, and maintaining the environmental policy." The ISO 14000 family includes most notably the ISO 14001 standard, which represents the core set of standards used by organizations for designing and implementing an effective environmental management system (EMS). Other standards in this series include ISO 14004, which gives additional guidelines for a good EMS, and more specialized standards dealing with specific aspects of environmental management. The major objective of the ISO 14000 series of norms is to provide "practical tools for companies and organizations of all kinds looking to manage their environmental responsibilities." The ISO