In addition to ISO this methodology adopts the general concepts specified in ISO/IEC 27001 and helps to assist in the satisfactory implementation of Information Security based on a risk management approach. 102-1 a. Name of the organisation.