What is the ISO27k Forum and who should join?

The ISO27k Forum is a free professional community hosted by ISO27001 Security (iso27001security.com) for people who work with the ISO/IEC 27000-series information risk and security management standards. According to the site, it has over 5,000 professional members. It suits information risk and security professionals who want peer discussion around understanding and implementing the ISO27k standards, and it is worth considering if you prefer a practitioner community over paid training or consultancy. The site describes itself as a not-for-profit initiative offering its information and guidance for free.

What the forum is

The forum sits alongside the site's other free resources. The homepage groups them as:

• ISO27k FAQ – background on the standards
• ISO27k Toolkit – downloadable tools and resources
• ISO27k Forum – the member community
• ISO27k Blog – news updates

The site states it covers all 100 "ISO27k" standards and offers "extensive, pragmatic guidance" on the ISO/IEC 27000-series. The forum is the discussion layer of that offering: a place for the global information risk and security community to compare notes.

Who should join

The forum is aimed at information risk and security professionals. It is most useful if you:

• Work with ISO/IEC 27001 or other ISO27k standards and want to compare interpretations with peers
• Are implementing an ISMS and want practical input rather than only the published text
• Want to keep up with developments across the ISO27k family, such as the standards revisions the site reports on
• Prefer a free, practitioner-oriented community to a commercial channel

If you only need to read the standards themselves, the site's FAQ and standards information may be enough. The forum adds value when you have questions, ambiguities, or implementation experience to exchange.

What you can expect to get from it

The site positions the forum as a way to "join 5,500 professional peers." In practice that means:

• Peer discussion of standard requirements and how they apply in real organisations
• Implementation experience from people running ISMS programmes
• Awareness of changes in the ISO27k standards, complementing the blog's news posts

The site does not publish a detailed breakdown of forum categories or activity levels, so treat the member count as a scale indicator rather than a guarantee of response times or topic coverage.

How to join

The homepage presents the forum as a free resource: "Download the free ISO27k Toolkit and join 5,500 professional peers on the ISO27k Forum (also free!)." To join, go to iso27001security.com and follow the ISO27k Forum link from the main resource list. The site does not describe a paid tier or membership fee for the forum, and it notes that donations toward running costs are gratefully received.

Practical considerations

• Free to use, donation-supported. The site describes itself as a not-for-profit initiative that has "run on a shoestring for decades," funded by donors and advertisers.
• Community, not consultancy. The forum is peer discussion; it does not replace formal certification advice or legal review.
• Check current activity. Member counts reflect cumulative sign-ups. Before relying on it for a time-sensitive question, look at recent threads to gauge how active the discussion is.
• Pair it with the other resources. The FAQ and Toolkit cover the reference material; the forum is where you take the questions those resources raise.