ISOIECstandardit

ISO/IEC standards are internationally recognized technical standards published jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). These standards span many sectors, including information technology, quality management, safety, and environmental management, and they are intended to improve interoperability, reliability, and safety of products, services, and processes worldwide.

Development is conducted by national standards bodies through the ISO/IEC Joint Technical Committee system, notably ISO/IEC JTC 1 for information technology. The process follows a formal, multi-stage consensus path that typically begins with a proposal, moves through working drafts and committee drafts, proceeds to a public or member review, and ends with approval and publication as an International Standard (ISO/IEC Standard).

Most standards are identified by a number such as ISO/IEC 27001, which specifies information security management systems, or ISO/IEC 20000, which covers IT service management. The numbering does not imply priority and many standards are complemented by related documents (for example, ISO/IEC 27002 or 27005) that provide guidance or methodologies. Some standards are developed by ISO alone or IEC alone and may be used in combination with others.

Usage and adoption: ISO/IEC standards are voluntary unless adopted by law or regulation. Organizations may pursue certification to demonstrate conformity to a standard, procurement and regulatory regimes may reference standards as requirements, and governments may require compliance for public safety, interoperability, or environmental reasons. Access to the standards is typically via purchase from the ISO or IEC or through national standard bodies.