ISO 27001:2013
ISO 27001:2013 is an international security standard that formally specifies an Information Security Management System (ISMS) intended to bring information security under explicit management control.
It is published by the International Organization for Standardization's (ISO) subcommittee and belongs to the ISO 27000 family of standards, which outlines hundreds of controls and control mechanisms to help organizations of all types and sizes keep their information assets secure. These global standards provide a framework for policies and procedures that include all legal, physical, and technical controls involved in an organization's information risk management processes
Read more