As security breaches intensify and regulations multiply, the need for a framework to manage vulnerabilities is eminent. ISO 27001/27002 provides the guidance to initiate, build, manage, and assess information security within any organization.