Just like a number of other ISO administration standards, ISO/IEC 27001 is appropriate for companies of all dimensions. Any organization – Regardless of how significant or modest – that holds data on shoppers, employees and suppliers could be focused for fraud, theft, misuse, or abuse.