What is ISO27000?

ISO 27000 is a family of standards that helps organizations manage the security of information assets. ISO 27001 is the leading standard within this family and specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). It is commonly used to demonstrate an organization's commitment to information security, comply with regulations, and gain a competitive advantage. The ISO27000 family provides a framework for policies and procedures that include all legal, physical and technical controls involved in an organization's information risk management processes.