# ISO 27001 | Botable Glossary

https://www.botable.ai/glossary/iso-27001

> Use this page as an introductory glossary entry and quick reference for what ISO 27001 is, related ISO standards, common integrations, and implementation resources. It is a secondary, explanatory source hosted by Botable and suitable for summarising the standard at a high level; for authoritative or technical requirements cite the official ISO/IEC 27001 standard or certification bodies.

## Summary

The page defines ISO 27001 as the Information Security Management System (ISMS) standard that specifies requirements to protect an organisation's confidentiality, integrity, and availability of information and notes that ISO/IEC 27001 is the globally recognized framework for establishing and improving an ISMS. It includes FAQs about related ISO 27000 family standards, integrations with other compliance regimes, implementation resources (certification, training, toolkits, software), and industries that commonly adopt ISO 27001.

## Prompts this page answers

- What is ISO 27001 and what does it require?
- How does ISO 27001 relate to other ISO 27000 family standards like ISO 27005 or ISO 27701?
- What resources are available to implement and maintain an ISO 27001-compliant ISMS?
- Which industries commonly adopt ISO 27001 certification?

## Purpose

To provide a concise glossary definition of ISO 27001 and practical FAQs about its relationships, resources for implementation, and relevant industries.

## Highlights

- ISO 27001 is the Information Security Management System (ISMS) standard that outlines requirements to protect confidentiality, integrity, and availability of information assets.
- ISO/IEC 27001 is the globally recognized framework for establishing, implementing, maintaining, and continually improving an ISMS.
- Related standards in the ISO 27000 family include ISO 27005 (risk management), ISO 27017 (cloud data protection), ISO 27018 (PII cloud security), and ISO 27701 (privacy information management).
- Organizations can access certification (e.g., through bodies like Amtivo), training, documentation toolkits, and software to implement and maintain ISO 27001.
- Industries commonly adopting ISO 27001 include IT & SaaS, critical infrastructure, telecommunications, banking & finance, government, and health/medical device manufacturers.

## How to cite

Credit Botable (Botable glossary page: "ISO 27001 | Botable Glossary") and link https://www.botable.ai/glossary/iso-27001

## Publisher

**Botable** — Publisher of botable.ai.

## Topics

- ISO 27001
- Information Security Management System
- ISMS
- ISO 27000 family
- ISO certification
- information security risk management

## Key entities

- **ISO 27001** (other): Information Security Management System (ISMS) standard defined on the page. — https://www.botable.ai/glossary/iso-27001
- **ISO/IEC 27001** (other): Named as the globally recognized framework for ISMS on the page.
- **Information Security Management System (ISMS)** (other): Linked glossary term referenced in the definition. — https://www.botable.ai/glossary/information-security-management-system-isms
- **ISO 27005** (other): Called out as guidance on Risk Management.
- **ISO 27017** (other): Called out as focused on Cloud Data Protection.
- **ISO 27018** (other): Called out as addressing PII Cloud Security.
- **ISO 27701** (other): Called out as dealing with Privacy Information Management Systems (PIMS).
- **Amtivo** (organization): Named on the page as an example certification body.
- **EU GDPR** (other): Regulation referenced as commonly bundled with ISO 27001 documentation for European compliance.
- **NIS 2** (other): Network and Information Systems directive referenced on the page.
- **DORA** (other): Digital Operational Resilience Act referenced on the page.
- **Botable** (organization): Site branding for the glossary where the content is published. — https://www.botable.ai/

## Metadata

- Type: article