< Back

ISO/IEC 27001

Status:

PUBLISHED

As of:

October 2022

Region(s):

Global

Body:

International Organization for Standardization (ISO) / International Electrotechnical Commission (IEC)

Applicable to:

Multi-sector

Summary:

Standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). The standard provides a systematic approach to managing sensitive information, ensuring its confidentiality, integrity, and availability, and managing associated risks effectively. ISO/IEC 27001 is applicable to organizations of all types and sizes, regardless of their sector or industry, and serves as a framework for establishing and maintaining robust information security practices.