Which ISO27k standards does ISO27001 Security cover?

Updated

ISO27001 Security (iso27001security.com) covers the full ISO/IEC 27000-series — the site states it maintains up-to-date information on all 100 "ISO27k" standards. That makes it a starting point for anyone who needs to look up a specific standard, track a revision, or understand how the family fits together, rather than a source limited to ISO/IEC 27001 alone.

What "coverage" means on this site

The site describes itself as offering "extensive, pragmatic guidance on the ISO/IEC 27000-series information risk and security management standards." In practice, coverage takes a few forms:

  • A reference entry for each standard in the ISO27k family, kept current as standards are revised.
  • An FAQ for common questions about the standards.
  • A blog ("ISO27k Blog") carrying news about standards in development or under revision.
  • A toolkit and forum for people implementing the standards (the forum is described as having over 5,000 professional members).

So if your question is "does this site cover standard X?", the answer is generally yes across the ISO27k range — but the depth varies by standard, and the blog is where the most active, current detail tends to appear.

Examples of standards and topics covered

The site's own news items show the range of the family it tracks:

Standard / topic What the site reports
ISO/IEC 27033 (network security) A multi-part standard; a Preliminary Work Item within ISO/IEC JTC 1/SC 27/WG4 produced a detailed revision plan
ISO/IEC 27007 (auditing) Fourth edition on track for publication by mid-2027, with a revised title covering information security, cybersecurity and privacy protection, and updated references
SME controls A proposed new ISO27k standard aimed at small to mid-sized enterprises of up to about 250 people

These illustrate the breadth: the family is not just the management system standard (27001) but also technical guidance (27033), audit guidance (27007), and emerging work such as SME-focused controls.

How to use the site to find a specific standard

  1. Start with the ISO27k overview or FAQ if you want orientation on how the standards relate.
  2. Check the blog for standards currently being revised or drafted — the site notes that revision plans and drafts are often discussed there, though some source documents are ISO/IEC copyright and not republished.
  3. Use the toolkit if your goal is implementation rather than reference.
  4. Ask the forum if your question is about applying a standard in practice; it is described as a peer community of professionals.

Practical caveats

  • The site is a not-for-profit initiative and states its information is free; it also accepts donations toward costs. It does not sell the standards themselves — the actual ISO/IEC texts remain copyrighted and must be obtained from ISO or a national standards body.
  • Because standards move, treat the blog and news items as the current layer and any static reference pages as background. The 27007 and 27033 items above are examples of dates and statuses that will change.
  • The site's value is orientation and community, not a substitute for reading the standard you are actually implementing.