What is ISO/IEC 2700x?

ISO/IEC 2700x refers to the ISO/IEC 27000 family of standards, which provides a framework for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). ISO/IEC 27001 is the best-known standard in the family and specifies the requirements for an ISMS. Other standards in the family provide guidelines for specific aspects of information security, such as risk management, security controls, and sector-specific requirements. Organizations commonly use these standards to protect the confidentiality, integrity, and availability of their information assets, and to demonstrate their commitment to information security to customers, partners, and regulators.