What is an ISO 20071 certification?

ISO 27001, also referred to as ISO 27001:2005, is applicable to information technology management, and in particular security. Because this standard forces business management and technical IT staff to cooperate to meet certain management and information control objectives, it can improve cohesion between sometimes disjointed groups within an organization. It also promotes benchmarking and good practice.

Other than that, it also aims to provide confidentiality of all the information gathered and used by the company or organization. It aims to provide contingency support and planning for their whole system.

The ISO 27001 standard was published in October 2005, essentially replacing the old BS7799-2 standard. It is the specification for an ISMS(Information Security Management System).

On publication, ISO 27001 enhanced the content of BS7799-2 and harmonized it with other standards. A scheme was been introduced by various certification bodies for conversion from BS7799 certification to ISO27001 certification.