The ISO 27001 is an Information Security Management System (ISMS) standard introduced in October 2005 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).    The ISO 27001:2005 ISMS provides a system for creating or improving an organization's information security needs and serves to proactively recognize, oversee and...