---
notetype: reference
standard: ISO 27001
version: 2022
language: EN
type: clause
id: "C.4.4"
title: "Information security management system"
tags:
- iso27001/2022/EN
- sourcetext
status: active
---
## 4.4 Information security management system

The organization shall establish, implement, maintain and continually improve an information security management system, including the processes needed and their interactions, in accordance with the requirements of this document.