ISO 9000

Quality Management - Fundamentals and Vocabulary

The reference document for quality management concepts, principles and terminology. ISO 9000:2026 is the fifth edition and replaces ISO 9000:2015; it supplies the definitions that ISO 9001 and the rest of the ISO/TC 176 portfolio rely on.

ISO 27000

Information Security Management Systems - Overview and Vocabulary

The overview and vocabulary document for the ISO/IEC 27000 family. It explains how the ISMS standards fit together and defines the terms they use, and is available free of charge from ISO.

ISO 27001

Information Security Management Systems

The certifiable requirements standard for an information security management system. Current edition is ISO/IEC 27001:2022 with Amendment 1:2024 (climate action); Annex A lists 93 controls organised into four themes.

ISO 27002

Information Security, Cybersecurity and Privacy Protection - Security Controls

The implementation guidance companion to ISO/IEC 27001. It describes 93 information security controls in four themes, each with purpose, guidance and attributes, and is not itself a certifiable standard.

ISO 20000

IT Service Management Systems

The certifiable requirements standard for a service management system. The third edition, ISO/IEC 20000-1:2018, adopted the harmonized management system structure; Amendment 1:2024 added climate action wording.

ISO 22301

Business Continuity Management Systems

The certifiable business continuity management system standard. Current edition is ISO 22301:2019 with Amendment 1:2024 (climate action); a revision is in preparation at committee draft stage.

ISO 42001

Artificial Intelligence Management Systems

The first certifiable AI management system standard (AIMS), specifying requirements for the responsible development, provision and use of AI systems

ISO 27005

Information Security Risk Management

Guidance on managing information security risks in support of an ISO/IEC 27001 information security management system; guidance only, not certifiable

ISO 27017

Cloud Services Information Security Controls

Cloud-specific information security guidance extending ISO/IEC 27002 for cloud service providers and cloud service customers; second edition published 2026

ISO 27018

Cloud Privacy - Protection of PII in Public Clouds

Guidance on protecting personally identifiable information in public cloud services where the provider acts as a PII processor; third edition published 2025

ISO 27701

Privacy Information Management Systems

Certifiable requirements for a privacy information management system (PIMS); the 2025 second edition is a standalone standard, no longer an extension to ISO/IEC 27001

ISO 27032

Cybersecurity Guidelines for Cyberspace

Guidelines for Internet security, explaining how Internet security relates to network, web and cybersecurity; second edition published 2023, replacing the 2012 cyberspace-focused edition

ISO 22739

Blockchain and DLT - Vocabulary

The international vocabulary for blockchain and distributed ledger technologies; second edition published 2024, replacing ISO 22739:2020

ISO 23257

Blockchain and DLT - Reference Architecture

Reference architecture for blockchain and distributed ledger technology systems, defining concepts, roles, functional components and architectural views

ISO 23894

Artificial Intelligence - Risk Management

Guidance on managing risk specific to artificial intelligence, applying the ISO 31000 risk management model to AI development and use; guidance only, not certifiable

ISO 30141

Internet of Things - Reference Architecture

Reference architecture for Internet of Things systems, providing a conceptual model, architectural views and design patterns; second edition published 2024

ISO 21448

Road Vehicles - Safety of the Intended Functionality (SOTIF)

Defines safety of the intended functionality (SOTIF) and gives an argument framework and design, verification, validation and operation measures for hazards arising from functional insufficiencies rather than component failures.

ISO 24028

Artificial Intelligence - Overview of Trustworthiness in AI

A technical report surveying the factors that affect the trustworthiness of systems providing or using AI, including transparency, explainability, controllability, robustness, safety, security and privacy.

ISO 27030

IoT Security and Privacy - Guidelines (published as ISO/IEC 27400)

ISO/IEC 27030 was the working project number for IoT security and privacy guidelines; the work was renumbered and published as ISO/IEC 27400:2022, which is the standard to reference.

ISO 10006

Quality Management - Guidelines for Quality Management in Projects

Guidelines for applying quality management in projects, covering both quality management in projects and quality management systems in projects. It is not a guide to project management itself.

ISO 21500

Project, Programme and Portfolio Management - Context and Concepts

Specifies the organizational context and underlying concepts for project, programme and portfolio management, and acts as the entry point to the ISO 21500 series.

ISO 21502

Project, Programme and Portfolio Management - Guidance on Project Management

Provides high-level descriptions of project management practices that are considered to work well and produce good results, covering the project from pre-project activities through delivery to post-project activities.

ISO 30414

Human Resource Management - Human Capital Reporting and Disclosure

The 2025 second edition of the human capital reporting standard, setting out requirements and recommendations for internal and external human capital reporting and disclosure (HCRD). It replaces the withdrawn ISO 30414:2018.

ISO 21001

Educational Organizations - Management Systems (EOMS)

Requirements for a management system for educational organizations (EOMS), aimed at enhancing satisfaction of learners, other beneficiaries and staff. The 2025 second edition replaces ISO 21001:2018.