What is ISO 27001/27002?

ISO 27001 is an international standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). ISO 27002 provides guidelines for information security management best practice. ISO 27001 is commonly used by organizations to manage the security of assets such as financial information, intellectual property, employee details or information entrusted by third parties. It's a framework for policies and procedures that includes all legal, physical and technical controls involved in an organization's information risk management processes.