Learn in the textbookMajor International and Domestic Standards
DefinitionISO/IEC 27000 is a family of international standards, developed jointly by ISO and IEC, on the information security management system (ISMS), the framework for protecting information.
ExplanationThis family defines information security as preserving the confidentiality, integrity, and availability of information. The specific measures taken to reduce risk are called controls (管理策), and the series includes standards with different roles, such as requirements, guidance on controls, and supplements for specific fields.
AnalogyInstead of buying locks, a safe, and security cameras piecemeal, it is like drawing up a family security plan that decides what to protect and includes the habit of reviewing the measures.
Memory hookThe first letters of each abbreviation name the field: Q in QMS for quality, E in EMS for environment, and IS in ISMS for information security.