ISO/IEC 27001:2013 is the world’s best-known standard for informaon security management systems (ISMS). It defines the requirements an ISMS must meet.

It provides companies of any size and from all sectors of acvity with guidance for establishing, implemenng, maintaining, and connually improving an informaon security management system.

Conformity with ISO/IEC 27001:2013 means that an organizaon or business has put in place a system to manage risks related to the security of data owned or handled by the company and that this system respects all the best pracces and principles enshrined in this Internaonal Standard.

With cybercrime on the rise and new threats constantly emerging, it can seem problemac, or even impossible, to manage cyber risks. ISO/IEC 27001:2013 helps organizaons become risk-aware and proacvely idenfy and address weaknesses. It promotes a holisc approach to informaon security: veng people, policies, and technology. An informaon security management system implemented according to this standard is a tool for risk management, cyber-resilience, and operaonal excellence.

Implemenng the informaon security framework specified in the ISO/IEC 27001:2013 standard helps you:

• Reduce your vulnerability to the growing threat of cyber-atacks
• Respond to evolving security risks
• Ensure that assets such as financial statements, intellectual property, employee data, and informaon entrusted by third pares remain undamaged, confidenal, and available as needed
• Provide a centrally managed framework that secures all informaon in one place
• Prepare people, processes, and technology throughout your organizaon to face technologybased risks and other threats
• Secure informaon in all forms, including paper-based, cloud-based, and digital data
• Save money by increasing efficiency and reducing expenses for ineffecve defense technology

ISO 45001:2018 specifies requirements for an occupaonal health and safety (OH&S) management system and guidance to enable organizaons to provide safe and healthy workplaces by prevenng work-related injury, and proacvely improving their OH&S performance. It applies to any organizaon that wishes to establish, implement, and maintain an OH&S management system to improve occupaonal health and safety, eliminate hazards and minimize OH&S risks (including system deficiencies), take advantage of OH&S opportunies, and address OH&S management system nonconformies associated with its acvies.

ISO 45001:2018 helps an organizaon achieve the intended outcomes of its OH&S management system. Consistent with the organizaon’s OH&S policy, the intended outcomes of an OH&S management system include:

• Connual improvement of OH&S performance;
• Fulfillment of legal requirements and other requirements;
• Achievement of OH&S objecves.

It applies to any organizaon regardless of its size, type, and acvies. It is also applicable to the OH&S risks under the organizaon’s control, considering factors such as the context in which the organizaon operates and the needs and expectaons of its workers and other interested pares.

ISO 45001:2018 enables an organizaon, through its OH&S management system, to integrate other aspects of health and safety, such as worker wellness/wellbeing. Standard does not address issues such as product safety, property damage, or environmental impacts, beyond the risks to workers and other relevant interested pares. It can be used in whole or in part to systemacally improve occupaonal health and safety management. However, claims of conformity to this document are not acceptable unless all its requirements are incorporated into an organizaon’s OH&S management system and fulfilled without exclusion.