Not only does ISO 27001 give an organization an Information Security Management System (ISMS) that can be externally audited and help demonstrate to shareholders, customers and other stakeholders that it takes its information security seriously, but through the Plan-Do-Check-Act (PDCA) process the organization will roll out appropriate policies and procedures, implement effective staff awareness t