ISO/IEC 27001

ISO/IEC 27001 is an information security standard. It specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). Organizations with an ISMS that meet the standard's requirements can choose to have it certified by an accredited certification body following successful completion of an audit.

There are also numerous recognized national and sector specific variants of the standard.

Back to Compliance in Practice →

Source: Wikipedia · Image: Wikimedia Commons · Public domain

GDPRIQ

Data privacy, decoded — GDPR compliance guides, consent and breach know-how, plus handy everyday calculators.

Get new guides by emailOccasional emails. No spam. Unsubscribe anytime.

InformationAbout Contact Privacy Policy Terms of Service Disclaimer Affiliate Disclosure Cookie Policy

Every museum entry, image, fact, and figure is drawn from Wikipedia and Wikimedia Commons, used under public-domain and Creative Commons licenses. No content is AI-generated.