An Information Security Management System (ISMS) is a systematic approach to managing company sensitive information so that it remains secure. It encompasses people, processes and IT systems.

The purpose of the Information Security is to preserve:

An Information Security Management System (ISMS) is a management system based on a systematic business risk approach, to establish, implement, operate, monitor, review, maintain, and improve information security.

ISO/IEC 27001 is the only auditable international standard which defines the requirements for an Information Security Management System (ISMS). The standard is designed to ensure the selection of adequate and proportionate security controls.