ISO 27001: A part of the ISO 27000 family, ISO 27001 provides the specification for an information security management system (ISMS). It outlines a systematic approach to managing sensitive company information so that it remains secure. It includes people, processes, and IT systems by applying a risk management process and giving due importance to information security risk treatment. Achieving ISO 27001 certification can help organizations demonstrate to clients, stakeholders, and regulatory authorities that they have implemented best-practice information security processes.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D1: Information Security governance | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index