ISO 27001

ISO/IEC 27001 is the international standard for establishing, operating and continually improving an information security management system (ISMS). Organisations with a certified ISMS very likely meet roughly 70 to 80 percent of the basic requirements of Germany's NIS2 implementation, and Annex A 6.3 requires staff to demonstrate practical competence.