The standard ISO/IEC 27001 specifies the requirements for establishing, implementing, maintaining and continuously improving an Information Management System in an organizational context. 

The development and implementation of such a system is influenced by the objectives, security requirements, organizational processes and size and structure of the organisation applying it.

The company in possession of the Certification accredited according to ISO/IEC 27001: 

• Can preserve the confidentiality, integrity and availability of information by setting up a risk management process
• Can increase customers satisfaction, through the effective application of the system, ensuring respect for privacy and protected management of information.

It's important that the information security management system is an integral part of the company's processes and that it is overall structured and considered in the design processes, information and control systems. 

The requirements describes in ISO/IEC 27001 are applicable to all organizations, regardless of their type, nature and size. 

Through certification by an independent third-party body, the company provides credibility of its commitments to its customers and stakeholders.