ISO/IEC 27000 - Certified Lead Auditor

Exam Code: ISO_27000_LA

ISO/IEC 27000:2018 provides an overview of information security management systems (ISMS). The 27000 series are aimed at establishing good practices in relation to the implementation, maintenance and management of the Information Security Management System (SGSI) or by its name in Information Security Management System (ISMS). These guidelines aim to establish best practices in relation to different aspects related to information security management, with a strong focus on continuous improvement and risk mitigation.

The standard also provides terms and definitions commonly used in the ISMS family of standards. It's applicable to all sizes and types of organisation (e.g. commercial enterprises, government agencies and not-for-profit organisations).

ISO/IEC 27000:2018 provides the overview of information security management systems (ISMS). It also provides terms and definitions commonly used in the ISMS family of standards. This document is applicable to all types and sizes of organization (e.g. commercial enterprises, government agencies, not-for-profit organizations).

- cover commonly used terms and definitions in the ISMS family of standards;

- do not cover all terms and definitions applied within the ISMS family of standards; and

- do not limit the ISMS family of standards in defining new terms for use.

ISO 27000 provides a glossary of terms and definitions for the ISMS family of standards. It was developed and published in joint collaboration by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It applies to organizations of all sizes. 

The ISO 27000 family of standards can be broadly classified into four categories of standards based on its function. Each has a purpose and can be normative or informative.