ISO 27001 is a certification for an Information Security Management System. ISMS is a framework that includes a set of procedures & policies, including technical, legal & physical controls involved in the information risk management process of an organisation.