The ISO/IEC 27001 information security management standard: literature review and theory-based research agenda

Purpose After 15 years of research, this paper aims to present a review the academic literature on ISO/IEC 27001, most renowned standard for information security and third widespread ISO certification. Emerging issues are reframed through lenses social systems thinking, deriving theory-based research agenda inspire interdisciplinary studies in field. Design/methodology/approach The study is structured as systematic review. Findings Research themes sub-themes identified five broad foci: relation with other standards, motivations, implementation, possible outcomes contextual factors. Originality/value presents overview body knowledge providing solid foundations future topic. A set opportunities outlined, aim at crossroad between quality management. Managers interested implementation policymakers can find an useful inform their decisions related regulatory activities.