ISO/IEC 27001 - Information security management

what is iec certification

The ISO 27000 family of standards helps organizations keep information assets secure.

Using this family of standards will help your organization manage the security of assets such as financial information, intellectual property, employee details or information entrusted to you by third parties.

ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS).

What is an ISMS?

An ISMS is a systematic approach to managing sensitive company information so that it remains secure. It includes people, processes and IT systems by applying a risk management process.

It can help small, medium and large businesses in any sector keep information assets secure.

Preview ISO/IEC 27001:2013

You can preview the

freely available sections of ISO 27001:2013 on our Online Browsing Platform. To purchase the standard please visit the ISO Store .

Certification to ISO/IEC 27001

Like other ISO management system standards, certification to ISO/IEC 27001 is possible but not obligatory. Some organizations choose to implement the standard in order to benefit from the best practice it contains while others decide they also want to get certified to reassure customers and clients that its recommendations have been followed. ISO does not perform certification.

Many organizations around the world are certified to ISO/IEC 27001. To find out more, visit the ISO Survey.

ISO Store

Information technology -- Security techniques -- Information security management systems -- Requirements
  • ISO/IEC 27002:2013


    Category: Insurance

    Similar articles: