27001

ISO/IEC 27001 is an international standard for information security management systems that defines requirements for risk-based protection of information assets. It matters in enterprise contexts as a formal framework for governance, assurance, certification, and alignment with regulatory and contractual security obligations.