Security Management System (ISMS). The core purpose of ISO 27001 is to provide a structured framework for organizations to effectively protect and manage their information assets.