The focal point of the ISO 27001 standard is to secure the confidentiality, integrity, and accessibility of the information in an organization. This is achieved by identifying what potential issues could happen to the information (i.e., hazard evaluation), and afterward characterizing what should be done to keep such issues from occurring (i.e., chance moderation or hazard treatment). Thus, the core principle of ISO 27001 Standard deals with the procedure for overseeing dangers: identify where the dangers are, and thereafter deliberately treat them by applying security controls.