An information security management technique that meets the necessities of ISO/IEC 27001 preserves the confidentiality, integrity and availability of information by implementing a hazard management course of action and provides self-assurance to fascinated functions that risks are adequately managed