2. ISO/IEC 27000 series

ISO/IEC 27000 is generally referred to in the IT sector as the technical security standard. In fact, it is a family of mainly eight standards, namely :

• PR NF ISO/CEI 27000 (draft published October 2013) – Information technology – Security techniques – Information security management systems – Overview and vocabulary ;

• NF ISO/CEI 27001 (published in December 2013). It is the French equivalent of the international standard ISO/IEC 27001: October 2013 and is entitled Technologies de l'information – Techniques de sécurité – Systèmes de management de la sécurité de l'information – Exigences ;

• NF ISO/CEI 27002 (published in January 2014). It is the French equivalent of the international standard ISO/IEC 27002 and is entitled Technologies de l'information – Techniques de sécurité...