ISO/IEC 27000 recommended by other ISO standards such as ISO 9000 and ISO 14000, used to manage information security risks and controls within an organization. Bringing information security deliberately under overt management control is a central principle throughout the ISO/IEC 27000 standards. Information security, like many technical subjects, is evolving a complex web of terminology. Relatively few authors take the trouble to define precisely what they mean, an approach which is unacceptable in the standards arena as it potentially leads to confusion and devalues formal assessment and certification. As with ISO 9000 and ISO 14000, the base '000' standard is intended to
ISO 55000 for recommending competent assessors and training providers. ISO 55000 ISO 55000 is an international standard covering management of assets of any kind. Before it, a Publicly Available Specification (PAS 55) was published by the British Standards Institution in 2004 for physical assets. The ISO 55000 series of Asset Management standards was launched in January 2014. PAS 55 was originally produced in 2004 by a number of organisations under the leadership of the Institute of Asset Management. It then underwent a substantial revision with 50 participating organisations from 15 industry sectors in 10 countries. PAS 55:2008 (available in both English and