ISO 27001 (ISO/IEC 27001:2013) is an international standard that provides requirements for establishing, implementing, maintaining, and continuously improving an information security management system (ISMS). It requires you to monitor, measure, analyze, and evaluate your ISMS.
Read an introductory guide to ISO 27001.