EVS-EN ISO/IEC 27001:2023

ISO/IEC 27001 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the organisation's context. ISO/IEC 27001 also includes requirements for assessing and treating information security risks tailored to the organisation's needs. The requirements set out in this standard are generic and are intended to apply to all organizations, regardless of type, size or nature.

ISO/IEC 27001 handbook guides SMEs in developing and implementing the standard. More information on how to find the right information security standards can be found here. 

The text has been aligned with the harmonized structure for management system standards and ISO/IEC 27002:2022.