scope:

This International Standard establishes guidelines and general principles for initiating, implementing and maintaining information security management in an organization. The objectives outlined in this standard provide general guidance on the commonly accepted goals of information security management. This document may serve as a practical guideline for developing organizational security standards and effective security management practices, and to provide confidence in inter-organizational dealings.