Data security compliance with the ISO/IEC 27001:2022 - information security, cybersecurity, and privacy protection standard - eBook

ISO (International Organization for Standardization) is an independent, non-governmental international organization with a membership of 170 national standards bodies. ISO/IEC 27001 is jointly published by ISO and the International Electrotechnical Commission (IEC) and is the world’s best-known standard for information security management systems (ISMS). The ISO/IEC 27001 standard provides all organizations with guidance for establishing, implementing, maintaining, and continually improving information security management systems. 

Conformity with ISO/IEC 27001 means that an organization or business has put in place a system to manage risks related to the security of data owned or handled by the organization, and that this system employs all the best practices and principles enshrined in this International Standard.