ISO 27001 is an internal standard for information security management systems. It can be applied to any process by any organisation and it is voluntary, not mandatory. HDS is a French standard that is mandatory for organisations that process French patient data. As ISO 27001 is the main pillar of HDS, organisations must obtain ISO27001 certification in order to receive HDS certification.