CSA CAN/CSA-ISO/IEC 27000-11

Abstract

This International Standard provides: <br>a) an overview of the ISMS family of standards; <br>b) an introduction to information security management systems (ISMS); <br>c) a brief description of the Plan-Do-Check-Act (PDCA) process; and <br>d) terms and definitions for use in the ISMS family of standards. <br>This International Standard is applicable to all types of organization (e.g. commercial enterprises, government agencies, non-profit organizations). <br><strong>Purpose of this International Standard</strong> <br>This International Standard provides an overview of information security management systems, which form the subject of the ISMS family of standards, and defines related terms. <br>NOTE Annex A provides clarification on how verbal forms are used to express requirements and/or guidance in the ISMS family of standards. The ISMS family of standards includes standards that: <br>a) define requirements for an ISMS and for those certifying such systems; <br>b) provide direct support, detailed guidance and/or interpretation for the overall Plan-Do-Check-Act (PDCA) processes and requirements; <br>c) address sector-specific guidelines for ISMS; and <br>d) address conformity assessment for ISMS. <br>The terms and definitions provided in this International Standard: <br>&#8212; cover commonly used terms and definitions in the ISMS family of standards; <br>&#8212; will not cover all terms and definitions applied within the ISMS family of standards; and <br>&#8212; do not limit the ISMS family of standards in defining terms for own use. <br>Standards addressing only the implementation of controls, as opposed to addressing all controls, from ISO/IEC 27002 are excluded from the ISMS family of standards. <br>To reflect the changing status of the ISMS family of standards, this International Standard is expected to be continually updated on a more frequent basis than would normally be the case for other ISO/IEC standards.