ISO 27001 - Security of Information Technologies
is an international standard, a risk-based standard. It defines the requirements for the establishment, implementation, maintenance and continuous improvement of an information security management system (ISMS).