ISO 27001 is a standard for information security management systems. It is strongly complementary because BSI C5 provides a framework to demonstrate security according to a specific cloud computing standard, while ISO 27001 provides the overall ISMS framework to manage information security risks. Organizations often use both to demonstrate robust security practices.