ISO/IEC 27001

As world becomes increasingly digitized, organizations are implementing complex information systems. This is linked to organizations’ efforts to protect their own important information, as well as the information of partner organizations and customers.

The Information Security Management System (ISMS) provides a framework for risk assessment, the design and implementation of information security measures, and the management of information security.

ISO/IEC 27001 Information Security Management Systems (ISMS) – Specification with guideline for implementation – is the standard which specifies the requirements for implementation, establishment, operation, monitoring, review, maintenance and improvement of  ISMS.

The organisation declares the assurance of information security management system requirements by certification according to ISO/IEC 27001. A certified organisation is qualified to use a certification mark.