Glossary: Compliance, Privacy and Penetration Testing

ISO/IEC 27001

Also written: ISO 27001

An information security management standard published jointly by the ISO and the IEC. Certification bodies audit against it in two stages, and the certificate lasts three years, with a smaller surveillance audit each year.