ISMS

ISO/IEC 27001:2013 (also known as ISO27001) is the international standard that sets out the specification for an information security management system (ISMS). Its best-practice approach helps organisations manage their information security by addressing people and processes as well as technology.

An information security management system (ISMS) is a framework of policies and controls that manage security and risks systematically and across your entire enterprise—information security. These security controls can follow common security standards or be more focused on your industry.

Major Components of an ISMS

Scope and boundaries.
Information classification.
Risk Management Methodology.
Risk Treatment.
Statement of Applicability.
Incident Handling.
Physical Security.
Controls that meet the organisation's business activity.