Definition
ISO/IEC 27001The international standard for information security management systems. It sets requirements for how security is governed, not for which products are used. is the international standard for Information Security Management Systems (ISMSThe management system - policies, roles, risk assessments and procedures - that ISO 27001 sets requirements for. The certification proves the ISMS actually works.). It specifies requirements for establishing, implementing, maintaining, and continually improving an information security management system. Certification signals that the organisation manages information security risk in a systematic manner. ISO 27001 is a requirement in many tender processes and is relevant for energy suppliers under NIS2EU directive on network and information security - imposes strict security requirements on critical infrastructure..