ISO/IEC 27001 provides requirements for information security management systems.
- True
- False
Answer: True
ISO/IEC 27001 specifies ISMS requirements: risk assessment, controls, monitoring, improvement. Certification demonstrates commitment to security best practices.