ISO/IEC 27000 Series refers to a family of standards for information security management that defines key terms, principles, and guidance for protecting information assets. The series is used to establish, implement, review, and improve security controls and management processes within organizations. In work settings, the series supports policy development, risk management, compliance assessment, and consistent security practices across teams and systems.

ISO/IEC 27002 refers to a set of guidance for selecting, implementing, and managing information security controls within an organization. It is used to support the design of security policies, procedures, and safeguards that reduce information risks and protect assets. In work contexts, it helps teams establish consistent security practices, assess control coverage, and align internal measures with recognized security guidance.

The NIST Cybersecurity Framework (CSF) is not a certification, but rather a voluntary set of guidelines and best practices designed to help organizations manage and reduce cybersecurity risks. The framework consists of five core functions: Identify, Protect, Detect, Respond, and Recover. These functions provide a holistic approach to cybersecurity that helps organizations assess their current security posture, identify weaknesses, and implement measures to address them. The framework is widely used and recognized by businesses, government agencies, and other organizations as a valuable tool for improving cybersecurity.

Payment Card Industry (PCI) Data Security Standards refer to a set of security requirements designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment. This skill encompasses knowledge of compliance measures, risk management, and security protocols necessary to protect sensitive payment data from breaches and fraud. Understanding PCI Data Security Standards is used to implement security controls, conduct audits, and develop policies that safeguard cardholder information and maintain trust in payment systems.

Security Governance refers to the framework of policies, procedures, and controls that ensure an organization’s information security aligns with its objectives and regulatory requirements. It is used to manage risks, enforce accountability, and maintain the integrity, confidentiality, and availability of information systems.