Glossary: Security Testing and Awareness Training

ISMS (information security management system)

Also written: ISMS

The policies, processes and people that manage an organization's security risk. ISO/IEC 27001 sets its requirements.