ISO / IEC 27001 Information technology - Security techniques - Information security management system - is an international standard defining the requirements for an information security management system. The system focuses on the protection of information throughout the organization, its processes and the IT tools used.
The standard contains the following chapters:
- Subject of the standard
- Reference documents
- Terms and definitions
- The context of the organization
- Leadership role
- Planning
- Support
- Operation
- Performance evaluation
- Improving
The current annexes are a mandatory overview Table A.1 - Objectives of the measure and individual measures Sometimes also known as the Statement of Applicability.