In the era of the Data Economy, information security has become extremely important. In a world increasingly globalized and interconnected, the risks deriving from the loss, theft and manipulation of sensitive information and data can cause significant damage to organizations. An important step towards the protection of an organizations’ sensitive information is to make all of their members aware of the risks involved in their actions.

The goal of Information Security is to protect a given organization's information from a wide range of threats, so as to minimize business risks, maximize return on investments and support business continuity.

The international standard for information security management ISO / IEC 27001, belonging to the ISO / IEC 27000 series, represents the framework for implementing an effective information security program which takes into account the physical, technical and organizational sides.