ISO 27001 part of a growing family of ISO standards, the 'ISO 27000 series is an information security management system (ISMS) standard published in October 2005 by the International Organization for Standardization (ISO).

Its full name is ISO/IEC 27001:2005 - Information technology -- Security techniques -- Information security management systems -- Requirements but it is commonly known as "ISO 27001". An Information Security Management System (ISMS) provides a systematic approach to managing sensitive information in order to protect it. It encompasses employees, processes and information systems.

The objective of the standard itself is to "provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving an Information Security Management System ISO 27001 defines comprehensive requirements for an ISMS that deals with all the technical and Human aspects in information security in all its operational processes. Companies can be independently audited to ISO 27001and achieve registration to show their customers, partners and regulatory bodies that their processes are secure in handling information.ISO 27001 refers to ISO 17799 for implementation guidance and includes an abstract of ISO 17799 as an appendix showing auditors the kinds of control to expect.

The goal of ISO 27001:2005 is to provide a common base for developing organizational information security policies and procedures.

Benefits of ISO 27001:2005:

• Systematic identification of Information Security Risks and its mitigation.
• Availability of Business Continuity Plans in case of manmade and natural disasters.
• Potentially lower premium of computer risk insurance.