ISO27001 can be implemented by any organisation, regardless of its size or industry, that wants to protect its sensitive information and manage risks effectively.