ISO 27001
Technology & Computing abbreviation · Cybersecurity
| Stands for | ISO/IEC 27001 (information security management standard) |
|---|---|
| Categories | Technology & Computing |
ISO 27001 stands for ISO/IEC 27001 (information security management standard), a cybersecurity abbreviation.
The international standard specifying requirements for an information security management system (ISMS), under which an organization assesses risks and implements controls, with certification by accredited auditors. It is the most widely recognized security certification worldwide.
Example: Our ISO 27001 certificate covers the data centers and support team, but not the new subsidiary.
Usage notes
Published by ISO and the IEC in 2005, derived from British Standard BS 7799, and revised in 2013 and 2022. The 2022 version lists 93 controls in Annex A, grouped into organizational, people, physical and technological themes. Certification requires annual surveillance audits and full recertification every three years. It is often compared with SOC 2, which is more common in the United States.
Related abbreviations
More cybersecurity abbreviations
- HSTS – HTTP Strict Transport Security
- IAM – Identity and access management
- IDS – Intrusion detection system
- IoC – Indicator of compromise
- IPS – Intrusion prevention system
- IR – Incident response
- JWT – JSON Web Token
- KMS – Key Management Service
- MAC – Mandatory access control
- MD5 – Message-Digest Algorithm 5
- MDM – Mobile device management
- MDR – Managed detection and response