An international standard defining requirements for protecting information confidentiality, integrity, and availability against security threats and breaches.