in this lecture you will get to know the iso 27000 family of standards the iso 27000 family of Standards is a series of interrelated standards that can be combined to form a comprehensive framework for Information Security Management there are four categories of Standards within this family standards describing overview and terminology standard specifying requirements standards describing General guidelines and standards describing sector-specific guidelines please note how they are normative and informative standards only normative standards can be audited for compliance this allows organizations to get certified and demonstrate their abilities to Outsiders all standards specifying requirements are normative standards all the other standards are informative standards let's have a closer look at standards describing overview and terminology first this is the case for ISO 27000. as you can already tell from the title this standard is all about overview and vocabulary in terms of Information Security Management Systems this is also reflected in the scope and the purpose of this standard so to sum it up ISO 27000 serves as the foundation for all standards within this family and the best part about this standard is the fact that it's available for free all right let's try to get a copy of ISO 27000. therefore we visit iso.
org and open up this search query here we simply search for ISO 27000. and hit enter um there we go this takes us to this page and let's change the filter to standards and there we go here is ISO 27000.