# ISO/IEC 27001

Concept · [Cloud, hosting and security](https://ecosystem.samcarlton.com/cloud)

Also called: ISO 27001, ISO27001, ISO/IEC 27001 certification, 27001

An international standard for running an information security management system. Companies can be certified against it to show customers they manage security risks in a structured way.

**For example:** A European customer asks for an ISO/IEC 27001 [certificate](https://ecosystem.samcarlton.com/https) the way an American customer might ask for a [SOC 2 report](https://ecosystem.samcarlton.com/soc-2).

## Connects to (4)

- [SOC 2](https://ecosystem.samcarlton.com/soc-2): An examination of how a service company protects customer data.
- [Compliance](https://ecosystem.samcarlton.com/compliance): Meeting the laws, regulations and standards that apply to a company.
- [Data governance](https://ecosystem.samcarlton.com/data-governance): The rules and responsibilities for how an organization's data is collected, stored, used and protected.
- [Encryption](https://ecosystem.samcarlton.com/encryption): Scrambling data with a key so only someone with the right key can read it.

Map view: https://ecosystem.samcarlton.com/iso-27001