Information technology - Security techniques - Information security management systems - Requirements the purpose of ISO IEC 27001 is to help organizations to establish and maintain an information security management system (ISMS). An ISMS is a set of interrelated elements that organizations use to manage and control information security risks and to protect and preserve the confidentiality, integrity, and availability of information. These elements include all of the policies,...