An international standard that provides a systematic approach to managing sensitive company information through the implementation of an Information Security Management System