There are a number of other ‘standards’ used for information security auditing. None equal ISO/IEC 27001 and ISO/IEC 27002. The international ISMS standards have the benefit of thousands of hours of refinement and practical feedback from actual implementations across the globe. They have been recently upgraded to bring them up to date within our electronic information society. They are aligned with other international management and quality standards (ISO/IEC 9000, 14000, 20000). Furthermore, these ISMS standards actively encourage organizations to enhance and add their own controls whenever their specific circumstances demand it, but in a manner which is consistent with the form of expression and audit practices of the overall ISMS framework. Additionally, the ISMS standards are supported by auditor training requirements, formal accreditation and certification schemes world-wide, which generally affords an ISMS certificate global recognition, adding significantly to its worth. Zygma can provide clients with detail guidance on how they can implement an ISMS and, moreover, can demonstrate how an ISMS can be extended to show conformity with specific pieces of legislation, or indeed with any specific internal control needs which clients may have (refer to some of Zygma’s white papers).