ISO/IEC JTC 1/SC 27 is the joint ISO and IEC subcommittee responsible for developing international standards on information security, cybersecurity and privacy protection. Its remit includes the ISO/IEC 27000 family of information security management standards, cryptographic techniques, security evaluation criteria and identity management. It is the principal global body coordinating consensus standards in the security and privacy domain.
Content
- The subcommittee organises its work across working groups covering information security management systems, cryptography and security mechanisms, security evaluation, security controls and services, and identity management and privacy. Its standards are widely adopted in regulatory and procurement contexts, making SC 27 a foundational authority for security and privacy interoperability.