International standard ISO/IEC 27001 is a world recognized standard for establishing, implementing, monitoring and reviewing, updating and improving an ISMS. This book focuses on the concept of having an information security management system (ISMS) as a framework for achieving the effective management of information security risks.