An information and facts security management method that fulfills the requirements of ISO/IEC 27001 preserves the confidentiality, integrity and availability of information by making use of a danger management method and offers assurance to intrigued parties that risks are sufficiently manag