InformationSecurityManagement.help is an independent educational publication covering information security management, ISMS, risk, governance, controls, evidence, assurance and audit. ISO/IEC 27001 is one important subject within that wider discipline.
Our purpose is to help readers understand relationships and ask better questions. We do not provide certification or accreditation and do not represent ISO, IEC or any standards body.
What you will find
Independent explanations, primary-source links and clearly labelled fictional examples. We distinguish practical illustrations from official requirements.