6. Main guides and standards

6.1 The 27000 family

The standards family ISO 27000 defines best practices for information systems security management. These have evolved over the years, and are integrated into the general framework of the standard. ISO 31000 which describes the principles and guidelines of risk management, as well as the implementation processes at strategic and operational levels.

The most important standards in this family include :

• the standard ISO 27000 which provides an overview and defines the vocabulary...