Firstly, it is important to look at the title of the standard: Information technology -- Security techniques -- Information security management systems -- Requirements.  ISO 27001 is primarily a management system standard, however there are aspects of the standard that apply to IT and related areas. It is important to note that the standard does not specifically focus on cyber security issues.  Cybersecurity is given its own standard: ISO/IEC 27032:2012 Information technology — Security techniques — Guidelines for cybersecurity