ISO 27001

What it is

The international standard for an information security management system (ISMS), certified by accredited bodies.

Applies to

Any organisation that chooses to certify; often required by customers or in public tenders

Current version

ISO/IEC 27001:2022 with Amendment 1:2024 (climate action). Certificates to the 2013 edition expired on 31 October 2025

Set by

ISO and IEC (joint committee JTC 1/SC 27)

Official text: ISO: ISO/IEC 27001