An international standard that provides a framework for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). It helps organizations manage sensitive information and comply with various regulations.