An ISO 27001 information security management system is a systematic and pro-active approach to effectively managing risks to the security of your company’s confidential information.