What Is ISO/IEC 27001?

ISO/IEC 27001 is an international standard that provides the basis for effective management of confidential and sensitive information and for the application of information security controls. Conformance with the standard requires organizations to continually improve their control of confidential and sensitive information, giving reassurance to sponsors, shareholders and customers.

The standard was re‑released in 2013 and builds upon established foundations as the most widely recognized international standard aimed specifically at information security management. Adopting an Information Security Management System (ISMS) is a strategic decision that drives the coordination of operational security controls across all of an organization’s electronic and physical information resources.