ISO 27001 Information Security

The objective of the standard itself is to «provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving an Information Security Management System». Regarding its adoption, this should be a strategic decision. Further, «The design and implementation of an organization’s ISMS is influenced by their needs and objectives, security requirements, the process employed and the size and structure of the organization».