The University of SydneyPage 19ISO/IEC 27000 series–It is intentionally structured as a flexible document–Technology constantly changes…so the document does not aim at addressing technology–The real intent is to identify a set of best practices