ISO/IEC 27001 Information Security Management System

ISO/IEC 27001 is an information security management system, jointly issued by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).

It provides a comprehensive framework and best practice guidelines for organizations to establish, implement, maintain and continuously improve an information security management system. The purpose of the standard is to help organizations effectively manage information security risks and ensure the confidentiality, integrity and availability of information assets.