ISO 27001 gives a detailed plan for managing information security. It sets the rules for an ISMS to handle risks related to data security.