Confidentiality refers to the assurance that information is accessible only to authorised people today or entities.ISO 27001 appreciably contributes to helpful risk management by presenting a systematic approach for identifying, evaluating, and mitigating information security risks. The standard emphasizes an extensive risk assessment process that