Glossary
ISO 27001
What Is ISO 27001?
ISO 27001 is the international standard for information security management systems (ISMS), providing requirements for establishing, implementing, maintaining, and continuously improving an organization's approach to managing information security risk.
ISO 27001 certification is widely required in enterprise procurement and partner due diligence. The standard requires comprehensive asset management, vulnerability management, and supply chain security practices — all of which depend on accurate inventories of the software actually in use. NetRise Turbine supports ISO 27001 evidence requirements by producing binary-derived SBOMs and risk findings that reflect what is truly running in deployed systems.
Related Terms
NIST CSF 2.0 · Software Bill of Materials · Software Composition Analysis · Software Supply Chain Security


