ISO/IEC 27001 is an internationally recognized standard for
Information Security Management Systems (ISMS). It provides
a systematic approach for managing, implementing, monitoring,
reviewing, and improving information security within an
organization. ISO/IEC 27001 is designed to help organizations
protect their information assets. Information assets can include
sensitive customer data, financial information, intellectual
property, and any other data or information critical to the
organization’s operations.

Transition-Guide-IEC-27001-Issue-1