ISO/IEC 2700 outlines how to build and maintain an information security management system and served as a baseline for certification. It originated as the British Standard BS7799, which had two parts that described control objectives and controls to meet objectives, and how to set up a security program. ISO/IEC 27001 specifies the requirements for an information security management system against which an organization's compliance can be audited. ISO/IEC 27002 provides best practice recommendations for information security controls covering areas such as information security policies, asset management, and architecture.

1. ISO/IEC 2700
Outlines how an information
security management (AKA
security Program) should be
built and maintained
Before it was called Britsh
Standard (BS) and had 2
parts
BS7799 - Part I
BS7799 - Part II
Outlined how control
objectives and range of
controls that could be used
to meet those objectives
Outlined how a security
program could be set up and
maintained
Also served as a baseline
that organizations could be
certified against
Had several version numbers :
BS7799,BS7799V1,
BS7799V2,ISO17799,BS779903:2005
Follows the PDCA Cycle
ISO/IEC27001
Attets the organization
against compliance level
Describes process for
auditing (Requirements)
those best practices
ISO/IEC 27002
Information Security Policy
Information Security
Architecture
Asset Management (Cla
ssification and control) and
so on
Describes information
Security best practices
(Techniques)
ISO/IEC 27000 - Overview
and Vocabulary
ISO/IEC 27003 - Guidelines
for ISMS implementation
ISO/IEC 27004 - Guideline for
Information security
management measurement
and metrics framework
ISO/IEC 27005 Guideline for
Information security Risk
Management
ISO/IEC 27011 - Information
security management
guidelines for
telecommunications
organizations
ISO/IEC 27031 - Guideline for
information and
communication technology
readiness for business
Continuity
ISO/IEC 27033-1 - Guideline
for network security
ISO 27799 - Guideline for
information security
management in health
organizations