STANDARD ISO/IEC 27001

ISO/IEC 27001 is the internationally recognised standard that defines the
requirements for the establishment, implementation, maintenance and
continual improvement of a documented information security management
system (ISMS).

It takes into account the specific context of an organisation, including its risks,
objectives and requirements, in order to ensure a systematic security concept.

Key aspects of ISO/IEC 27001

• Structure and requirements: The standard establishes clear processes and
  procedures to identify, assess and address information security risks.
• Risk-based approach: Organisations analyse potential threats and
  vulnerabilities in order to develop targeted measures.
• Continuous improvement: An ISMS is a dynamic process that is
  regularly monitored and optimised to keep pace with new security
  requirements and threats.
• Adaptation to the organisational context: Consideration of internal and
  external factors, such as legal requirements or industry-specific characteristics.

Advantages of ISO/IEC 27001

• Increased security: Protection of sensitive data against loss, theft and
  unauthorised access.
• Building trust: Proof of a reliable information security strategy to
  customers, partners and authorities.
• Compliance: Support in complying with legal and regulatory
  requirements, e.g. GDPR.
• Process optimisation: Promotion of a clear structure and efficient
  processes in dealing with information security.

With ISO/IEC 27001 certification, companies send a clear signal of their commitment
to high information security and long-term trust building.