The recent increase in the rate of successful cyber-attacks has become a significant source of worry for business leaders. There is now a growing demand for ISO 27001 certification by clients as a means for their service providers to demonstrate the maturity of their information security program. ISO 27001 is an international standard published by the International Standardization Organization (ISO) / International Electrotechnical Commission (IEC). It outlines how to manage and ensure information protection in an organization.