Reliability, security & resilience · Working

ISO 27001

Also called: ISO/IEC 27001

ELI5

A standard for managing information-security risks.

Used in conversation

“The ISO 27001 certification scope excludes one subsidiary.”

Definition

An international standard for establishing and improving an information security management system.

Here “ISO 27001” means: An international standard for establishing and improving an information security management system.

Pitch context

You will see “ISO 27001” in product strategy decks, roadmaps, experiments and architecture reviews when the discussion reaches reliability, security & resilience.

Why it matters: In reliability, security & resilience, the scope can change what data may be used, who may access it and which controls are required.

Sources & evidence · 2

Direct term-level sources and supporting source families.