EVS-EN ISO/IEC 27000:2026

ISO/IEC 27000 gives an overview of the concepts and principles used in the documents related to information security management systems (ISMS), including ISO/IEC 27001. ISO/IEC 27000 is considered to be a horizontal document as it provides an explanation of the concepts and principles that underpin information security and ISMS.

The main changes in ISO/IEC 27000 are:
— the structure of the document has been changed to stress its primary role, which is to provide an overview of, and explain the relationships between, documents related to ISMS (information security management systems) including ISO/IEC 27001,
— text presenting the concepts and principles of information security and information security management systems has been added,
— Clause 3 has been modified to only contain definitions for those terms used in presenting the concepts and principles described in this document,
— it is no longer a terminology document.

ISO/IEC 27000:2026 text has been approved in Europe as EN ISO/IEC 27000:2026 without any changes.