What is an ISMS?

An Information Security Management System (ISMS) is a systematic approach to managing sensitive company information to ensure its confidentiality, integrity and availability. It comprises guidelines, processes, procedures and technologies to manage information security risks.