ISO 27001 is for Small medium business, which requires only a minimum of procedures and technology in order to be compliant with this standard.
This makes it all the more important that a firm's information security management should be carried out by someone with expertise and experience .
Iso 27001 Certification Body