It is designed to help organizations ensure that they have effective Information security management systems (ISMS), which are vital for managing the information risks they face. It furthermore provides both senior management and staff at all levels with the assurance that information security risks are taken seriously and understood.
ISO 27001