International standard for Information Security Management System (ISMS) that defines requirements to establish, implement, maintain, and continually improve the protection of data and information assets. Requires risk assessment, selection of controls from Annex A, document management, internal audits, management review, and compliance with the Plan-Do-Check-Act cycle. Certification recognized for demonstrating maturity in information security management.