ISO 27001:2013 Certification

Information Security Management

ISO 27001 provides a structured system for managing information-security risks and protecting the confidentiality, integrity and availability of information.

Main focus areas

Information-security risk assessment
Security controls
Incident management
Access and asset management
Continual improvement

Typical value

A structured management or technical standard can help an organization document responsibilities, control key activities, evaluate performance and improve confidence among interested parties. Certification or accreditation requirements vary by standard and scope.