Audit and compliance
ISMS
Also called: information security management system
An information security management system is the documented set of policies, processes and controls, and the governance around them, that an organization uses to manage information security risk. ISO 27001 certifies the management system, not any individual control.