What is ISO/IEC 27001? | A Definition by UpGuard

What is ISO/IEC 27001?

ISO/IEC 27001 is an international standard for improving the cyber resilience of information systems.

Though ISO/IEC 27001 certification is optional, it’s highly recommended because it demonstrates an organization’s exemplary cybersecurity practices.

Key takeaways

Organizations that don’t wish to pursue ISO 27001 certification can still apply the framework to improve their security posture
ISO 27001 is industry agnostic, any business can improve its cybersecurity with the framework.
ISO/IEC 27001 compliance could assist with GDPR compliance.

No items found.

Read more about ISO/IEC 27001

Learn more about ISO/IEC 27001 and the latest issues in cybersecurity.

Top 8 Cybersecurity Regulations for Financial Services

Abstract image background

Top 8 Cybersecurity Regulations for Financial Services

The top 12 cybersecurity regulations every business in the finance sector must be aware of.

June 27, 2023

Meeting ISO Third-Party Risk Management Requirements in 2023

Abstract image background

Meeting ISO Third-Party Risk Management Requirements in 2023

Learn how to intelligently implement the most relevant ISO controls to support your Third-Party Risk Management program in 2023.

June 5, 2023

Meeting the Third-Party Risk Requirements of ISO 27001

Abstract image background

Meeting the Third-Party Risk Requirements of ISO 27001

Learn which ISO 27001 controls are relevant to TPRM and how the UpGuard platform can help meet each control’s objectives.

Catherine Chipeta

July 13, 2023

View all blog posts

See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

More from our blog

Learn more about the latest issues in cybersecurity.

The Top Cybersecurity Websites and Blogs of 2023

Abstract image background

The Top Cybersecurity Websites and Blogs of 2023

This is a complete guide to the best cybersecurity and information security websites and blogs. Learn where CISOs and senior management stay up to date.

Abi Tyas Tunggal

April 6, 2023

14 Cybersecurity Metrics + KPIs You Must Track in 2023

Abstract image background

14 Cybersecurity Metrics + KPIs You Must Track in 2023

Cybersecurity metrics and key performance indicators (KPIs) are an effective way to measure the success of your cybersecurity program.

Abi Tyas Tunggal

August 17, 2023

What are Security Ratings? Cyber Performance Scoring Explained

Abstract image background

What are Security Ratings? Cyber Performance Scoring Explained

This is a complete guide to security ratings and common usecases. Learn why security and risk management teams have adopted security ratings in this post.

Abi Tyas Tunggal

August 25, 2023

How to Manage Third-Party Risk in a World of Breaches

Abstract image background

How to Manage Third-Party Risk in a World of Breaches

A comprehensive overview for managing third-party risk. Learn about common causes of third-party risks and how to mitigate them in this post.

Abi Tyas Tunggal

August 18, 2023

How to Prevent Data Breaches in 2023 (Highly Effective Strategy)

Abstract image background

How to Prevent Data Breaches in 2023 (Highly Effective Strategy)

Learn how to implement an effective security control strategy for defending against data breaches in 2023

June 22, 2023

Why is Cybersecurity Important?

Abstract image background

Why is Cybersecurity Important?

If your business isn't concerned about cybersecurity, it's only a matter of time before you're an attack victim. Learn why cybersecurity is important.

Abi Tyas Tunggal

July 18, 2023

View all blog posts

Sign up to our newsletter

Get the latest curated cybersecurity news, breaches, events and updates in your inbox every week.

Free instant security score

How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

Instant insights you can act on immediately
Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

Website Security scan results