ISO/IEC 27001 uses the term management system in a similar sense to ISO 9001 (standard for quality management).
A management system is the totality of all processes, tools and resources that are used in a coordinated manner to plan, execute, document and continuously improve the management tasks that arise in a target-, customer- and quality-oriented manner. The term ISMS thus describes all processes, procedures and measures (controls) that are planned and applied in an organization to ensure the required level of information security. The controls are accorded a particularly high level of importance.