ISO/IEC 27000:2026 — What Has Changed

In July 2026, ISO and IEC published the sixth edition of ISO/IEC 27000 — the standard that opens the whole information-security family. It looks like a small document, and it now genuinely is one: 11 pages, down from 27. But what was cut, what was renamed and what was reorganised says a great deal about where the ISO/IEC 27000 series is going, and anyone who maintains an ISMS, audits one, or references the standard in their documentation should know exactly what changed.

This one-hour briefing walks through the revision fact by fact: the new title and what its wording signals, the reduction of the terminology clause from 77 defined terms to 12, the restructured concepts-and-principles clause, the reworded fundamental principles, and the new way the standard categorises the documents related to an ISMS. It closes with the practical part — the short list of things you should actually do, and the reassuring truth that no major ISMS changes are required.

Who it is for

ISMS managers and implementers, internal and lead auditors, consultants, and anyone whose documentation cites ISO/IEC 27000. Familiarity with ISO/IEC 27001 is helpful but not required.

What you will be able to do

• Explain what ISO/IEC 27000 is for and why the 2026 revision matters
• State the headline changes: title, length, structure and terminology
• List the twelve retained terms and the two new ones
• Describe how the 2026 edition categorises the documents related to an ISMS
• Update your ISMS documentation and register of standards correctly — and know when to stop