ISO & IEC / Overview
ISO/IEC 27000:2026 The information security management map
This is the entry point to the information security management system (ISMS) family. It helps readers understand why the family has separate documents for requirements, controls, risk, measurement and assurance.
The place in the system
Where it fits
Use it to orient the reader before moving to ISO/IEC 27001 requirements or specialist guidance; it does not itself set ISMS requirements.
Practical interpretation
How to use this reference
These are editorial starting points, not copied requirements or an implementation checklist from the standard.
Questions and actions
- Identify which security decisions belong to governance, risk, control operation and assurance.
- Choose the family documents relevant to the organization's scope and delivery model.
- Record why each selected document is useful to the programme.
Evidence to look for
- Standards selection map
- ISMS scope sketch
- Stakeholder briefing note
Illustrative example
What it could look like
A new security lead inherits a list of ISO numbers without any explanation of how they relate. They use the family overview to plan which documents the risk team, control owners and auditors need to examine.
Boundary to keep clear
Do not describe the 2026 edition as the old vocabulary standard or as a certification target.
Source and edition check
Open the official record
Research checked 2026-10-20. Catalogue status and edition can change; the official publisher record controls. Full standard text is not reproduced here.