ISO 2007 is the international standard for a information security management system (“ISMS”).  ISO/IEC 27001, is an Information security management standard jointly published by the International Organization for Standardization and the International Electrotechnical Commission. ISO 27001 is a management standard that defines an Information Security Management System (ISMS).

It’s designed to manage an organization’s information security in an efficient manner and stand-alone ISO 27001 certifications aren’t typically available. Instead, organizations typically sign up for the standard as part of an information security management system registration.