The ISO/IEC 27001:2005 is a global security standard that sets requirements and best practices for managing an organisation's information assets.