Conformity with ISO/IEC 27001 means that an organization or business has set set up a system to manage risks related to the security of data owned or managed by the business, and that this system respects all the best practices and principles enshrined in this Intercontinental Standard.