Information Security Management System

An ISMS is the system of rules, responsibilities and processes with which an organisation plans, implements, monitors and improves its information security. The benchmark is usually ISO/IEC 27001 or, in Germany, the Federal Office for Information Security (Germany) (BSI)'s IT Baseline Protection (BSI) (IT-Grundschutz). An ISMS makes security demonstrable rather than accidental.