ISO: International Organization for Standardization in Cybersecurity
Usually 'eye-so' in US; 'I-S-O' letter by letter is also common.
ISO stands for International Organization for Standardization. ISO develops global standards across industries. In cybersecurity, ISO 27001 is the most widely adopted standard for information security management systems (ISMS), and ISO 27002 provides the control guidance.
How ISO Is Used in Cybersecurity
GRC analysts lead ISO 27001 certification projects by documenting the ISMS, conducting internal audits, and managing external audit readiness. Security architects design controls that satisfy ISO 27002 requirements. ISO certification is often a prerequisite for doing business with enterprise clients and international partners.
Read the full glossary entry: ISO 27001 in Cybersecurity
Cybersecurity Roles That Work with ISO
Related Cybersecurity Acronyms
Frequently asked questions
What does ISO stand for?
ISO stands for International Organization for Standardization. ISO develops global standards across industries. In cybersecurity, ISO 27001 is the most widely adopted standard for information security management systems (ISMS), and ISO 27002 provides the control guidance.
What is ISO used for in cybersecurity?
GRC analysts lead ISO 27001 certification projects by documenting the ISMS, conducting internal audits, and managing external audit readiness. Security architects design controls that satisfy ISO 27002 requirements. ISO certification is often a prerequisite for doing business with enterprise clients and international partners.
Sources
Definitions are original explanations written for career development purposes. For authoritative technical definitions, refer to NIST, ISO, or the relevant standards body.