An ISMS is a set of principles and procedures used to systematically manage an organisation's data. Using an ISMS minimises the chances and potential impact of a security breach occurring, to reduce a business’ data protection-related risk. An example of an ISMS is the PCI Security Standards Council (PCI SSC), which provides a set of data security standards that businesses in the payments industry should abide by.