ISO 27000 is the generic name assigned for standards related to information security issues and topics. Over time it is proposed that a range of standards will be published to cover subjects in this genre.

The first of these is ISO 27001, which is the specification for an ISMS. However, others are expected to follow over the next few years.

The current expectations are as follows:
ISO 27002 will be the replacement name for the next version of ISO 17799
ISO 27003 will offer ISMS implementation guidelines
ISO 27004 will cover information security metrics and measurements
ISO 27005 is expected to cover ISMS risk management
ISO 27006 is expected to cover business continuity and disaster recovery management.

The timescales for these developments are very much fluid, but certainly, work is well underway on a number of them.

WHY ISO27000?

Why the ISO 27000 series? We have absolutely no idea, with our reseach drawing a blank. If you can answer this question, please let us know!