What is Information Security Management System (ISMS)

ISMS is a framework of policies, procedures, guidelines and associated resources to establish, implement, operate, monitor, review, maintain and improve information security for all types of organisation. ISMS is defined in the family of standard and guidelines published jointly by the International Standardization Organisation (ISO) and the International Electrotechnical Commission (IEC), ISO/IEC 27000.

This standard defines the requirement for an ISMS establishes the basis for certification of an ISMS. The standards explain the overall plan-do-check-act (PDCA) approach provide detail guidance for it implantation.