ISO/IEC 27001 (ISMS)

ISO 27001 defines how to organize information security in any kind of organization, profit or non-profit, private or state-owned, small or large. It is safe to say that this standard is the foundation of information security management.