Yes—ISO 27001:2013 is considered a standards framework that organizations can adopt to improve their information security management practices and align with the leading industry best practices.