IT & Technology
Standards for IT service management, information security, cloud services, and emerging technologies
The IT and technology sector leverages numerous ISO standards covering information security, IT service management, cloud computing, AI, blockchain, and more. ISO 27001 is the cornerstone for information security management.
Technology companies also implement ISO 20000 for IT service management, ISO 42001 for AI systems, and cloud-specific standards like ISO 27017 and 27018.
Benefits
- Enhanced cybersecurity
- Customer trust increased
- Regulatory compliance
- Service quality improved
- Competitive advantage
- Risk management
Industry Challenges
- Rapid technology evolution
- Cyber threat landscape
- Data privacy regulations
- Cloud security complexity
- Skills shortage
All Standards for IT & Technology
ISO 9000:2026
Quality Management - Fundamentals and Vocabulary
The reference document for quality management concepts, principles and terminology. ISO 9000:2026 is the fifth edition and replaces ISO 9000:2015; it supplies the definitions that ISO 9001 and the rest of the ISO/TC 176 portfolio rely on.
ISO 27000:2018
Information Security Management Systems - Overview and Vocabulary
The overview and vocabulary document for the ISO/IEC 27000 family. It explains how the ISMS standards fit together and defines the terms they use, and is available free of charge from ISO.
ISO 27001:2022
Information Security Management Systems
The certifiable requirements standard for an information security management system. Current edition is ISO/IEC 27001:2022 with Amendment 1:2024 (climate action); Annex A lists 93 controls organised into four themes.
ISO 27002:2022
Information Security, Cybersecurity and Privacy Protection - Security Controls
The implementation guidance companion to ISO/IEC 27001. It describes 93 information security controls in four themes, each with purpose, guidance and attributes, and is not itself a certifiable standard.
ISO 20000:2018
IT Service Management Systems
The certifiable requirements standard for a service management system. The third edition, ISO/IEC 20000-1:2018, adopted the harmonized management system structure; Amendment 1:2024 added climate action wording.
ISO 22301:2019
Business Continuity Management Systems
The certifiable business continuity management system standard. Current edition is ISO 22301:2019 with Amendment 1:2024 (climate action); a revision is in preparation at committee draft stage.
ISO 42001:2023
Artificial Intelligence Management Systems
The first certifiable AI management system standard (AIMS), specifying requirements for the responsible development, provision and use of AI systems
ISO 27005:2022
Information Security Risk Management
Guidance on managing information security risks in support of an ISO/IEC 27001 information security management system; guidance only, not certifiable
ISO 27017:2026
Cloud Services Information Security Controls
Cloud-specific information security guidance extending ISO/IEC 27002 for cloud service providers and cloud service customers; second edition published 2026
ISO 27018:2025
Cloud Privacy - Protection of PII in Public Clouds
Guidance on protecting personally identifiable information in public cloud services where the provider acts as a PII processor; third edition published 2025
ISO 27701:2025
Privacy Information Management Systems
Certifiable requirements for a privacy information management system (PIMS); the 2025 second edition is a standalone standard, no longer an extension to ISO/IEC 27001
ISO 27032:2023
Cybersecurity Guidelines for Cyberspace
Guidelines for Internet security, explaining how Internet security relates to network, web and cybersecurity; second edition published 2023, replacing the 2012 cyberspace-focused edition
ISO 22739:2024
Blockchain and DLT - Vocabulary
The international vocabulary for blockchain and distributed ledger technologies; second edition published 2024, replacing ISO 22739:2020
ISO 23257:2022
Blockchain and DLT - Reference Architecture
Reference architecture for blockchain and distributed ledger technology systems, defining concepts, roles, functional components and architectural views
ISO 23894:2023
Artificial Intelligence - Risk Management
Guidance on managing risk specific to artificial intelligence, applying the ISO 31000 risk management model to AI development and use; guidance only, not certifiable
ISO 30141:2024
Internet of Things - Reference Architecture
Reference architecture for Internet of Things systems, providing a conceptual model, architectural views and design patterns; second edition published 2024
ISO 21448:2022
Road Vehicles - Safety of the Intended Functionality (SOTIF)
Defines safety of the intended functionality (SOTIF) and gives an argument framework and design, verification, validation and operation measures for hazards arising from functional insufficiencies rather than component failures.
ISO 24028:2020
Artificial Intelligence - Overview of Trustworthiness in AI
A technical report surveying the factors that affect the trustworthiness of systems providing or using AI, including transparency, explainability, controllability, robustness, safety, security and privacy.
ISO 27030:2022
IoT Security and Privacy - Guidelines (published as ISO/IEC 27400)
ISO/IEC 27030 was the working project number for IoT security and privacy guidelines; the work was renumbered and published as ISO/IEC 27400:2022, which is the standard to reference.
ISO 10006:2017
Quality Management - Guidelines for Quality Management in Projects
Guidelines for applying quality management in projects, covering both quality management in projects and quality management systems in projects. It is not a guide to project management itself.
ISO 21500:2021
Project, Programme and Portfolio Management - Context and Concepts
Specifies the organizational context and underlying concepts for project, programme and portfolio management, and acts as the entry point to the ISO 21500 series.
ISO 21502:2020
Project, Programme and Portfolio Management - Guidance on Project Management
Provides high-level descriptions of project management practices that are considered to work well and produce good results, covering the project from pre-project activities through delivery to post-project activities.
ISO 30414:2025
Human Resource Management - Human Capital Reporting and Disclosure
The 2025 second edition of the human capital reporting standard, setting out requirements and recommendations for internal and external human capital reporting and disclosure (HCRD). It replaces the withdrawn ISO 30414:2018.
ISO 21001:2025
Educational Organizations - Management Systems (EOMS)
Requirements for a management system for educational organizations (EOMS), aimed at enhancing satisfaction of learners, other beneficiaries and staff. The 2025 second edition replaces ISO 21001:2018.