Highlighting the key considerations of Information Management in any size of organisation and how by implementing an information security management system to the requirements of ISO27001, you can put in place a robust process to mitigate risks.