Answers.Body: <p>The standards you reference all relate to information security infrastructure and processes. It doesn't look to me like they apply directly at the application layer.</p>
  
  <p>CiviCRM is going to rely on the security of the underlying platform (LAMP stack) and how it's managed. I suggest you rephrase your question with a specific concern about CiviCRM.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-08-10T13:17:12.827Z
Answers.Text: Thanks for this Dan - good to understand where ISO27001 does and doens't apply.
Answers.UserDisplayName: James Harper
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-08-04T15:36:50.043Z
Answers.LastActivityDate: 2016-08-04T15:36:50.043Z
Answers.UserDisplayName: Dan O'Brien
Body: <p>Does Civi CRM have ISO 27001?</p>
  
  <p>And is it compliant with ISO 27002 and ISO 27017?</p>
  
Tags: <security>
Title: Does Civi CRM have ISO 27001? And is it compliant with ISO 27002 and ISO 27017?
ThreadText: # Does Civi CRM have ISO 27001? And is it compliant with ISO 27002 and ISO 27017?
  
  (Asked by: username_0 on 2016-08-04)
  
  Does Civi CRM have ISO 27001?
  
  And is it compliant with ISO 27002 and ISO 27017?
  
  **Tags:** security
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2016-08-04. Score: 1
  
  The standards you reference all relate to information security infrastructure and processes. It doesn't look to me like they apply directly at the application layer.
  
  CiviCRM is going to rely on the security of the underlying platform (LAMP stack) and how it's managed. I suggest you rephrase your question with a specific concern about CiviCRM.
  
  > **Comments:**
  > **username_0**: Thanks for this Dan - good to understand where ISO27001 does and doens't apply.  
  
  ---
  
  