ISO/IEC 27001 Information Security Management
The international standard for building and certifying an information security management system, or ISMS. It requires organizations to assess risks, apply controls from its annex, and continuously improve through audits and management review. Certification by an accredited body is often a prerequisite for winning enterprise and international business.