ISO/IEC 27002 is an international standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The standard provides guidelines for implementing and maintaining an effective ISMS. It focuses on the controls that organizations can implement to manage and reduce information security risks.