In an effort to define a comprehensive set of IT security guidelines, the International Organization for Standardization (ISO) has developed the growing family of internationally accepted ISO 27000 standards. They provide best-practice recommendations for the establishment and operation of an Information Security Management System (ISMS) that serves the purpose of protecting all assets within a company's IT organisation.

ISO 27001, probably the best known standard in the collection, defines requirements that an ISMS is to fulfil. Supplementing this framework, the other ISO 27000 publications contain recommendations for practical implementation, but also industry-specific adjustments to ISO 27001 requirements. Together, the standards form a comprehensive collection for a systematic approach to IT Security Management. plan42 supports you in all phases of implementation.