The ISO/IEC 27000 family of standards helps organizations keep information assets secure.
Using this family of standards will help your organization manage the security of assets such as financial information, intellectual property, employee details or information entrusted to you by third parties.
ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS).
There are more than a dozen standards in the 27000 family.
What is an ISMS?
An ISMS is a systematic approach to managing sensitive company information so that it remains secure. It includes people, processes and IT systems by applying a risk management process.
It can help small, medium and large businesses in any sector keep information assets secure.
ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization. It also includes requirements for the assessment and treatment of information security risks tailored to the needs of the organization. The requirements set out in ISO/IEC 27001:2013 are generic and are intended to be applicable to all organizations, regardless of type, size or nature.
Benefits of ISO/IEC 27001
- Helps you identify risks to your information and put in place measures to manage or reduce them,
- Helps you put in place procedures to enable prompt detection of information security breaches,
- Requires you to continually improve your Information Security Management System (ISMS),
- Improved reputation and stakeholder confidence,
- Better visibility of risk amongst interested parties,
- Builds trust and credibility in the market to help you win more business.