This standard specifies requirements for the management of information security systems (ISMS). It deals with the identification of assets and the implementation of security measures to protect them.