BSI Standards Publication Information technology – Security techniques – Information security management systems – Overview and vocabularyBS EN ISO/IEC 27000:2020 Copyright British Standards Institution Provided by IHS Markit under license with BSI - Uncontrolled Copy Licensee=Lloyds Register Group Services/5989898009, User=Yao, Leo Not for Resale, 03/31/2020 01:07:11 MDT No reproduction or networking permitted without license from IHS --`,,`,,``,```,``,,`,``,,``,,,``-`-`,,`,,`,`,,`---National foreword This British Standard is the UK implementation of EN ISO/IEC 27000:2020. It is identical to ISO/IEC 27000:2018. It supersedes BS EN ISO/IEC 27000:2017, which is withdrawn. The UK participation in its preparation was entrusted to Technical Committee IST/33/1, Information Security Management Systems. A list of organizations represented on this committee can be obtained on request to its secretary. This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. © The British Standards Institution 2020 Published by BSI Standards Limited 2020 ISBN 978 0 539 04524 6 ICS 01.040.35; 03.100.70; 35.030 Compliance with a British Standard cannot confer immunity from legal obligations. This British Standard was published under the authority of the Standards Policy and Strategy Committee on 31 March 2020. Amendments/corrigenda issued since publication Date Text affectedBRITISH STANDARD BS EN ISO/IEC 27000:2020 Copyright British Standards Institution Provided by IHS Markit under license with BSI - Uncontrolled Copy Licensee=Lloyds Register Group Services/5989898009, User=Yao, Leo Not for Resale, 03/31/2020 01:07:11 MDT No reproduction or networking permitted without license from IHS --`,,`,,``,```,``,,`,``,,``,,,``-`-`,,`,,`,`,,`---EUROPEAN STANDARD NORME EUROPÉENNE EUROPÄISCHE NORMEN ISO/IEC 27000 February 2020 ICS 01.040.35; 35.030 Supersedes EN ISO/IEC 27000:2017 © 2020 CEN Ref. No. EN ISO/IEC 27000:2020: E All rights of exploitation in any form and by any means reserved worldwide for CEN national MembersInformation technology - Security techniques - Information security management systems - Overview and vocabulary (ISO/IEC 27000:2018) Technologies de l'information - Techniques de sécurité - Systèmes de management de la sécurité de l'information - Vue d'ensemble et vocabulaire (ISO/IEC 27000:2018)Informationstechnik - Sicherheitsverfahren - Informationssicherheits-Managementsysteme - Überblick und Terminologie (ISO/IEC 27000:2018) This European Standard was approved by CEN on 20 October 2019. CEN and CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN and CENELEC member. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CEN and CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions. CEN and CENELEC members are the national standards bodies and national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom.English Version CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels Copyright British Standards Institution Provided by IHS Markit under license with BSI - Uncontrolled Copy Licensee=Lloyds Register